Bv9ARM.ch06.html revision f1fd37f759991616d454ce371a2390da45141593
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User>BIND 9 Configuration Reference</TITLE
ba9e87b35e561bc7354ce3f4b9685b747b7be507Tinderbox UserNAME="GENERATOR"
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsCONTENT="Modular DocBook HTML Stylesheet Version 1.41"><LINK
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsREL="PREVIOUS"
59663800d2ec04777dae2791dd92aa563faf94c8Evan HuntTITLE="The BIND 9 Lightweight Resolver"
1ca2cf024391992fe14b2df7d3ae0f575d074452Evan HuntTITLE="BIND 9 Security Considerations"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsBGCOLOR="#FFFFFF"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsTEXT="#000000"
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserLINK="#0000FF"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVLINK="#840084"
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserALINK="#0000FF"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="NAVHEADER"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCELLPADDING="0"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCELLSPACING="0"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsALIGN="center"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsVALIGN="bottom"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserALIGN="center"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="bottom"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsALIGN="right"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="bottom"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="chapter"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>Chapter 6. <SPAN
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="acronym"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> 9 Configuration Reference</A
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Table of Contents</B
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserHREF="Bv9ARM.ch06.html#configuration_file_elements"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Configuration File Elements</A
b378314925e78f21853a98cec924788ce1822c6cTinderbox UserHREF="Bv9ARM.ch06.html#Configuration_File_Grammar"
ebe53509ca55a141131c104b6d722236b606e0efTinderbox User>Configuration File Grammar</A
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>Zone File</A
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="acronym"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews> 9 configuration is broadly similar to <SPAN
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="acronym"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox Userthere are a few new areas of configuration, such as views. <SPAN
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="acronym"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User8.x configuration files should work with few alterations in <SPAN
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="acronym"
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson9, although more complex configurations should be reviewed to check
415d630b6309922caee8469384a6fab75cf05032Mark Andrewsif they can be more efficiently implemented using the new features
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrewsfound in <SPAN
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="acronym"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="acronym"
415d630b6309922caee8469384a6fab75cf05032Mark Andrews> 4 configuration files can be converted to the new format
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafssonusing the shell script
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="filename"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="sect1"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsNAME="configuration_file_elements"
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark Andrews>6.1. Configuration File Elements</A
ebe53509ca55a141131c104b6d722236b606e0efTinderbox User>Following is a list of elements used throughout the <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews> configuration
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsfile documentation:</P
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsCLASS="informaltable"
2a31bd531072824ef252c18303859d6af7451b00Francis DupontCELLPADDING="3"
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserCLASS="CALSTABLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox UserCLASS="varname"
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The name of an <TT
01a5c5503482fb3ba52088bf0178a7213273bf96Mark AndrewsCLASS="varname"
2b7254075b883d70852a2757210793603085a0f1Tinderbox User>address_match_list</TT
415d630b6309922caee8469384a6fab75cf05032Mark Andrewsdefined by the <B
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic UpdaterCLASS="command"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User> statement.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="varname"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>address_match_list</TT
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>A list of one or more <TT
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="varname"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="varname"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User>ip_prefix</TT
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="varname"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> elements, see
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic UpdaterHREF="Bv9ARM.ch06.html#address_match_lists"
415d630b6309922caee8469384a6fab75cf05032Mark Andrews>Section 6.1.1</A
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserVALIGN="MIDDLE"
5f7586ddbd3edd11272cdd30ed613d936129328bTinderbox UserCLASS="varname"
415d630b6309922caee8469384a6fab75cf05032Mark Andrews>domain_name</TT
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>A quoted string which will be used as
dc7e5458bbcb59ea310ed64ac7e77016e62e9c15Tinderbox Usera DNS name, for example "<SPAN
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox UserCLASS="systemitem"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserVALIGN="MIDDLE"
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox UserCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>dotted_decimal</TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>One or more integers valued 0 through
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews255 separated only by dots (`.'), such as <B
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>89.123.45.67</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>ip4_addr</TT
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsVALIGN="MIDDLE"
e5c7ef08d1bf9f8388de8174a47da78b9eeb7e5cTinderbox User>An IPv4 address with exactly four elements
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="varname"
2b7254075b883d70852a2757210793603085a0f1Tinderbox User>dotted_decimal</TT
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews> notation.</P
2ca9cf1582ae972f8edc2b03bd846973b05dee6bTinderbox UserVALIGN="MIDDLE"
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox UserCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>ip6_addr</TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>An IPv6 address, such as <B
076e51f1ff9497ae61a99994189ed8bf5a0d3472Tinderbox UserCLASS="command"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User>fe80::200:f8ff:fe01:9742</B
c4a35623959c143db02800584b8116d5b9cd72adTinderbox UserVALIGN="MIDDLE"
3ccf87473f7cf6d9faac156df38a935a238f96fdTinderbox UserCLASS="varname"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
8292deab031e7599cd7622aa7675fbe139ca6095Mark AndrewsCLASS="varname"
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark AndrewsVALIGN="MIDDLE"
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark AndrewsCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews>An IP port <TT
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic UpdaterCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater> is limited to 0 through 65535, with values
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrewsbelow 1024 typically restricted to root-owned processes. In some
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrewscases an asterisk (`*') character can be used as a placeholder to
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox Userselect a random high-numbered port.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="varname"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>ip_prefix</TT
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserVALIGN="MIDDLE"
9b0a4470f94e6e6c8ef5d85f3efa4fee0945796fTinderbox User>An IP network specified as an <TT
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsCLASS="varname"
9b0a4470f94e6e6c8ef5d85f3efa4fee0945796fTinderbox Userfollowed by a slash (`/') and then the number of bits in the netmask.
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox UserTrailing zeros in a <TT
baeaed18341c015e9ad54ffa21973184c1bc432bMark AndrewsCLASS="varname"
9b0a4470f94e6e6c8ef5d85f3efa4fee0945796fTinderbox User> may omitted.
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsFor example, <B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews> is the network <B
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsCLASS="command"
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews>127.0.0.0</B
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark AndrewsCLASS="command"
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews>255.0.0.0</B
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews> with netmask <B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>255.255.255.240</B
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox UserVALIGN="MIDDLE"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="varname"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson>domain_name</TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> representing
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrewsthe name of a shared key, to be used for transaction security.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User>A list of one or more <TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsseparated by semicolons and ending with a semicolon.</P
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox UserVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>A non-negative integer with an entire
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonrange limited by the range of a C language signed integer (2,147,483,647
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonon a machine with 32 bit integers). Its acceptable value might further
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonbe limited by the context in which it is used.</P
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>path_name</TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>A quoted string which will be used as
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtona pathname, such as <TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="filename"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>size_spec</TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>A number, the word <TT
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="userinput"
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updateror the word <TT
ae7e54b14c946e0984c191554db9abb4893f9349Automatic UpdaterCLASS="userinput"
ae7e54b14c946e0984c191554db9abb4893f9349Automatic UpdaterCLASS="varname"
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater> is that of unsigned long integers
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updateron the machine. An <TT
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark AndrewsCLASS="varname"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User>unlimited</TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox UserCLASS="varname"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User>size_spec</TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User> requests unlimited
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox Useruse, or the maximum available amount. A <TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox UserCLASS="varname"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User>default size_spec</TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox Userthe limit that was in force when the server was started.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="varname"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox Useroptionally be followed by a scaling factor: <TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox UserCLASS="userinput"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewskilobytes, <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserCLASS="userinput"
415d630b6309922caee8469384a6fab75cf05032Mark Andrewsmegabytes, and <TT
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> for gigabytes,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewswhich scale by 1024, 1024*1024, and 1024*1024*1024 respectively.</P
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonstorage overflow is currently silently ignored during conversion
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonof scaled values, resulting in values less than intended, possibly
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtoneven negative. Using <TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>unlimited</TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington> is the best way
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonto safely set a really large number.</P
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>yes_or_no</TT
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonalso accepted, as are the numbers <TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
b7aab05edae933e169d5f83c653935b17c7f0a8bMark AndrewsCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>dialup_option</TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox UserCLASS="userinput"
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User>notify-passive</B
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox UserCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark AndrewsWhen used in a zone, <TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>notify-passive</B
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark AndrewsCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonare restricted to slave and stub zones.</P
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="sect2"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="sect2"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonNAME="address_match_lists"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>6.1.1. Address Match Lists</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="sect3"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsNAME="AEN1204"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User>6.1.1.1. Syntax</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="varname"
2b7254075b883d70852a2757210793603085a0f1Tinderbox User>address_match_list</TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> = address_match_list_element ;
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="optional"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> address_match_list_element; ... </SPAN
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>address_match_list_element</TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>] (ip_address [<SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>/length</SPAN
620745a4c70077221fdeecaafd3252e9d3f944f3Tinderbox User key key_id | acl_name | { address_match_list } )
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1212"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>6.1.1.2. Definition and Usage</A
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>Address match lists are primarily used to determine access
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscontrol for various server operations. They are also used to define
dde130e859339194eebd7184eaf440981838a7f0Mark Andrewspriorities for querying other nameservers and to set the addresses
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
34d1f3b65324f8fcf358fa2f47891441d4b1d2f0Tinderbox User> will listen for queries. The elements
dde130e859339194eebd7184eaf440981838a7f0Mark Andrewswhich constitute an address match list can be any of the following:</P
dde130e859339194eebd7184eaf440981838a7f0Mark Andrews>an IP address (IPv4 or IPv6)</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>an IP prefix (in the `/'-notation)</P
bf19cffa72b8335c632232c497b64574f44d1176Tinderbox User>a key ID, as defined by the key statement</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>the name of an address match list previously defined with
bf19cffa72b8335c632232c497b64574f44d1176Tinderbox UserCLASS="command"
662620c15ce856d8242e295228c54d1e0546d8c4Tinderbox User> statement</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>a nested address match list enclosed in braces</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Elements can be negated with a leading exclamation mark (`!')
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsand the match list names "any," "none," "localhost" and "localnets"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsare predefined. More information on those names can be found in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe description of the acl statement.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The addition of the key clause made the name of this syntactic
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewselement something of a misnomer, since security keys can be used
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto validate access without regard to a host or network address. Nonetheless,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe term "address match list" is still used throughout the documentation.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>When a given IP address or prefix is compared to an address
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsmatch list, the list is traversed in order until an element matches.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsThe interpretation of a match depends on whether the list is being used
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsfor access control, defining listen-on ports, or as a topology,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsand whether the element was negated.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>When used as an access control list, a non-negated match allows
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsaccess and a negated match denies access. If there is no match,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsaccess is denied. The clauses <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>allow-notify</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>allow-query</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>allow-transfer</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>allow-update</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>blackhole</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsuse address match lists this. Similarly, the listen-on option will cause
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe server to not accept queries on any of the machine's addresses
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewswhich do not match the list.</P
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>When used with the topology clause, a non-negated match returns
f39894c0b1cafb24035c14c74868e48be25f04a5Mark Andrewsa distance based on its position on the list (the closer the match
7f9e2fff07b9c17e0d7a0ea7abc9304ce9d01b61Tinderbox Useris to the start of the list, the shorter the distance is between
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsit and the server). A negated match will be assigned the maximum
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsdistance from the server. If there is no match, the address will
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsget a distance which is further than any non-negated list element,
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrewsand closer than any negated element.</P
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews>Because of the first-match aspect of the algorithm, an element
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrewsthat defines a subset of another element in the list should come
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsbefore the broader element, regardless of whether either is negated. For
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> the 1.2.3.13 element is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscompletely useless because the algorithm will match any lookup for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthat problem by having 1.2.3.13 blocked by the negation but all
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsother 1.2.3.* hosts fall through.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1241"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>6.1.2. Comment Syntax</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9 comment syntax allows for comments to appear
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews anywhere that white space may appear in a <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> configuration
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews file. To appeal to programmers of all kinds, they can be written
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1246"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>6.1.2.1. Syntax</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>/* This is a <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> comment as in C */</PRE
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>// This is a <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> comment as in C++</PRE
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews># This is a <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> comment as in common UNIX shells and perl</PRE
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan HuntCLASS="sect3"
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox UserNAME="AEN1255"
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User>6.1.2.2. Definition and Usage</A
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User>Comments may appear anywhere that whitespace may appear in
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan HuntCLASS="acronym"
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt> configuration file.</P
efdfbc256c997060cfa0c2306c4fdd9dbc31342cTinderbox User>C-style comments start with the two characters /* (slash,
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Huntstar) and end with */ (star, slash). Because they are completely
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Huntdelimited with these characters, they can be used to comment only
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunta portion of a line or to span multiple lines.</P
efdfbc256c997060cfa0c2306c4fdd9dbc31342cTinderbox User>C-style comments cannot be nested. For example, the following
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Huntis not valid because the entire comment ends with the first */:</P
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan HuntCLASS="programlisting"
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt>/* This is the start of a comment.
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt This is still part of the comment.
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt/* This is an incorrect attempt at nesting a comment. */
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt This is no longer in any comment. */
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>C++-style comments start with the two characters // (slash,
4b568c8873e83be023f2995e0a30de804499842dTinderbox Userslash) and continue to the end of the physical line. They cannot
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsbe continued across multiple physical lines; to have one logical
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscomment span multiple lines, each line must use the // pair.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>For example:</P
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox UserCLASS="programlisting"
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User>// This is the start of a comment. The next line
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User// is a new comment, even though it is logically
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews// part of the previous comment.
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User>Shell-style (or perl-style, if you prefer) comments start
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrewswith the character <TT
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark AndrewsCLASS="literal"
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews> (number sign) and continue to the end of the
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrewsphysical line, as in C++ comments.</P
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews>For example:</P
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark AndrewsCLASS="programlisting"
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews># This is the start of a comment. The next line
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews# is a new comment, even though it is logically
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews# part of the previous comment.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="warning"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="warning"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsALIGN="CENTER"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>WARNING: you cannot use the semicolon (`;') character
7692464e78fc43578c394b8d1d30e81fec1d8523Tinderbox User to start a comment such as you would in a zone file. The
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews semicolon indicates the end of a configuration
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User statement.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect1"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect1"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="Configuration_File_Grammar"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>6.2. Configuration File Grammar</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9 configuration consists of statements and comments.
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews Statements end with a semicolon. Statements and comments are the
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews only elements that can appear without enclosing braces. Many
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews statements contain a block of substatements, which are also
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews terminated with a semicolon.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The following statements are supported:</P
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="informaltable"
b123be91958e0bc58a10c165be64d47661199e3bEvan HuntCELLPADDING="3"
b123be91958e0bc58a10c165be64d47661199e3bEvan HuntCLASS="CALSTABLE"
b123be91958e0bc58a10c165be64d47661199e3bEvan HuntVALIGN="MIDDLE"
b123be91958e0bc58a10c165be64d47661199e3bEvan HuntCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>defines a named IP address
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsmatching list, for access control and other uses.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>declares control channels to be used
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> utility.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>includes a file.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
6eb9141841e6ed9cbbdbbf41ab0e1c9592c5d078Mark Andrews>specifies key information for use in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsauthentication and authorization using TSIG.</P
6eb9141841e6ed9cbbdbbf41ab0e1c9592c5d078Mark AndrewsVALIGN="MIDDLE"
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsVALIGN="MIDDLE"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>specifies what the server logs, and where
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrewsthe log messages are sent.</P
95c3a5e116c1da135f669c3f15398172fac6279dMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt>controls global server configuration
2fee8782a6fd57d86a67949092ab9197111af390Evan Huntoptions and sets defaults for other statements.</P
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>sets certain configuration options on
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsa per-server basis.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>trusted-keys</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>defines trusted DNSSEC keys.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>defines a view.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>defines a zone.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statements may only occur once per
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews configuration.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1348"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Grammar</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews address_match_list
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
2da2220fe7af2c45724b50b0187523b1fab0cf08Rob Austein> Statement Definition and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statement assigns a symbolic
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews name to an address match list. It gets its name from a primary
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews use of address match lists: Access Control Lists (ACLs).</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Note that an address match list's name must be defined
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> before it can be used elsewhere; no
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews forward references are allowed.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The following ACLs are built-in:</P
e1a389f7478d094ffbe592df28328a10d484cb38Tinderbox UserCLASS="informaltable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCELLPADDING="3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="CALSTABLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Matches all hosts.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
82b96702f09ed6bc5cd0f1aa5e54198c04cc192bTinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Matches no hosts.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox UserCLASS="command"
7204d08a319cf590ae4280b8cc20999320398574Mark AndrewsVALIGN="MIDDLE"
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews>Matches the IP addresses of all interfaces
7204d08a319cf590ae4280b8cc20999320398574Mark Andrewson the system.</P
7204d08a319cf590ae4280b8cc20999320398574Mark AndrewsVALIGN="MIDDLE"
7204d08a319cf590ae4280b8cc20999320398574Mark AndrewsCLASS="command"
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews>localnets</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
81573f7b114a4c71c0bf47058c00fffd245323ceTinderbox User>Matches any host on a network for which
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrewsthe system has an interface.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark AndrewsNAME="AEN1390"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Grammar</A
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inet ( ip_addr | * ) [<SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> port ip_port </SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> address_match_list </I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews> key_list </I
9dde9ce5558696850b6b9850a8475ae518409518Tinderbox UserCLASS="optional"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews> inet ...; </SPAN
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsCLASS="sect2"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsCLASS="sect2"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsNAME="AEN1399"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Definition and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statement declares control
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews channels to be used by system administrators to affect the
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User operation of the local nameserver. These control channels are
c4a35623959c143db02800584b8116d5b9cd72adTinderbox User used by the <B
c4a35623959c143db02800584b8116d5b9cd72adTinderbox UserCLASS="command"
c4a35623959c143db02800584b8116d5b9cd72adTinderbox User> utility to send commands to
c4a35623959c143db02800584b8116d5b9cd72adTinderbox User and retrieve non-DNS results from a nameserver.</P
c4a35623959c143db02800584b8116d5b9cd72adTinderbox UserCLASS="command"
c4a35623959c143db02800584b8116d5b9cd72adTinderbox User socket accessible to the Internet, created at the specified
c4a35623959c143db02800584b8116d5b9cd72adTinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> on the specified
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>. If no port is specified, port 953
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews is used by default. "*" cannot be used for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>The ability to issue commands over the control channel is
620745a4c70077221fdeecaafd3252e9d3f944f3Tinderbox User restricted by the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
51374c645c0e6dd77c369c13834c751785f96f14Tinderbox User> clauses. Connections to the control
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews channel are permitted based on the address permissions in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>address_match_list</B
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews members of the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>address_match_list</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ignored, and instead are interpreted independently based the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> is allowed to be used to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews authenticate commands and responses given over the control
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews channel by digitally signing each message between the server and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a command client (See <A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Remote Name Daemon Control application</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsHREF="Bv9ARM.ch03.html#admin_tools"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Section 3.4.1.2</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>). All commands to the control channel
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews must be signed by one of its specified keys to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews be honored.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The UNIX control channel type of <SPAN
f09f1bf18e3ad40a0e8a6cc3dabf1c11f04992cbMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 8 is not supported
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9.0.0, and is not expected to be added in future
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews releases. If it is present in the controls statement from a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User> 8 configuration file, a non-fatal warning will be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1425"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Grammar</A
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark AndrewsCLASS="programlisting"
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark AndrewsCLASS="replaceable"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="sect2"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="sect2"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsNAME="AEN1430"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews> Statement Definition and
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews> statement inserts the
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews specified file at the point that the <B
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statement is encountered. The <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statement facilitates the administration of configuration files
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews by permitting the reading or writing of some things but not
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews others. For example, the statement could include private keys
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews that are readable only by a nameserver.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1437"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Grammar</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews algorithm <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1444"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
81573f7b114a4c71c0bf47058c00fffd245323ceTinderbox User> Statement Definition and Usage</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statement defines a shared
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews secret key for use with TSIG, see <A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Section 4.4</A
81573f7b114a4c71c0bf47058c00fffd245323ceTinderbox UserCLASS="replaceable"
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User>, also known as the
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User key name, is a domain name uniquely identifying the key. It can
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User be used in a "server" statement to cause requests sent to that
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User server to be signed with this key, or in address match lists to
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User verify that incoming requests have been signed with a key
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater matching this name, algorithm, and secret.</P
e135e3c4b1f4f986f00997f5ad5866effb203139Tinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>algorithm_id</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> is a string
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews that specifies a security/authentication algorithm. The only
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews algorithm currently supported with TSIG authentication is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="literal"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>hmac-md5</TT
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="replaceable"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>secret_string</I
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews> is the secret to be
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews used by the algorithm, and is treated as a base-64 encoded
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="sect2"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="sect2"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsNAME="AEN1456"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews> Statement Grammar</A
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="programlisting"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="replaceable"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>channel_name</I
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="command"
7614afdab2abb26b34531409d2f28dcc56c52c6eEvan HuntCLASS="replaceable"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>path name</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox UserCLASS="literal"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>unlimited</TT
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>size spec</I
fdd0516065be2316409d0cc7dfb4e4f54eadc5afMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
fdd0516065be2316409d0cc7dfb4e4f54eadc5afMark Andrews>syslog_facility</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="command"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
74d98566ed6a2280ea84d146e7c81275f1c5649dMark AndrewsCLASS="option"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>print-category</B
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>print-severity</B
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>print-time</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>category_name</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>channel_name</I
384e37a497027518dd33d9c78575e58dd24a796dTinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>channel_nam</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1496"
b577ce9ed2153db6539fb975b4a7aa16d9b3baeeTinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Definition and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User> statement configures a wide
4b14dedee8b236fc66413d8589c4cb3d950092ceTinderbox Uservariety of logging options for the nameserver. Its <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrewsassociates output methods, format options and severity levels with
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updatera name that can then be used with the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto select how various classes of messages are logged.</P
edfc6f05eaff086af661b2535a766373dc1e8345Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statement is used to define
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsas many channels and categories as are wanted. If there is no <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
5382b244c33da2a91116127313d6e8ad47175b41Tinderbox Userthe logging configuration will be:</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt category "default" { "default_syslog"; "default_debug"; };
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9, the logging configuration is only established when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe entire configuration file has been parsed. In <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsestablished as soon as the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewswas parsed. When the server is starting up, all logging messages
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsregarding syntax errors in the configuration file go to the default
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewschannels, or to standard error if the "<TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewswas specified.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserNAME="AEN1513"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>6.2.10.1. The <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>All log output goes to one or more <I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="emphasis"
bac4435d473c9a0281507524f084480c34aa942aTinderbox Useryou can make as many of them as you want.</P
e5c7ef08d1bf9f8388de8174a47da78b9eeb7e5cTinderbox User>Every channel definition must include a destination clause that
2128e98a141572c7cf701f3faee1a80c9c2a1a01Tinderbox Usersays whether messages selected for the channel go to a file, to a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsparticular syslog facility, to the standard error stream, or are
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrewsdiscarded. It can optionally also limit the message severity level
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrewsthat will be accepted by the channel (the default is
2128e98a141572c7cf701f3faee1a80c9c2a1a01Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>), and whether to include a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>-generated time stamp, the category name
dda78c0f84895c174ef7206dca6082939c030792Tinderbox Userand/or severity level (the default is not to include any).</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> destination clause
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscauses all messages sent to the channel to be discarded;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsin that case, other options for the channel are meaningless.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> destination clause directs the channel
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto a disk file. It can include limitations
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsboth on how large the file is allowed to become, and how many versions
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsof the file will be saved each time the file is opened.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
4898d4ae6072702caa8a39a702f810212bca0473Tinderbox User> option for files is simply a hard
4898d4ae6072702caa8a39a702f810212bca0473Tinderbox Userceiling on log growth. If the file ever exceeds the size, then <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsnot write anything more to it until the file is reopened; exceeding
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe size does not automatically trigger a reopen. The default behavior
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsis not to limit the size of the file.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>If you use the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> log file option,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> will retain that many backup versions
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsof the file by renaming them when opening. For example, if you choose
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto keep 3 old versions of the file <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsjust before it is opened <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
16afb24a0006e01f1b9d9256b44be035b1bb2d32Tinderbox UserCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsrenamed to <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsrenamed to <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>. No rolled versions
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsare kept by default; any existing log file is simply appended. The <B
6b9225c4be71da5d6c426072c231a611b86459a7Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsis synonymous with <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> in current <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> releases.</P
1dbe80aade5bed39893d903cf9d7318a5265813aTinderbox User>Example usage of the size and versions options:</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>channel "an_example_channel" {
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews file "example.log" versions 3 size 20m;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews print-time yes;
632a81d4535df620c89e29c3948d1c197944570eTinderbox User print-category yes;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> destination clause directs the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewschannel to the system log. Its argument is a
8760668accc65fa979e533074409396829eb85ffTinderbox Usersyslog facility as described in the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> will handle messages sent to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthis facility is described in the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewspage. If you have a system which uses a very old version of <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsonly uses two arguments to the <B
2706fce75f04398595d9648122c6b67164e94fccTinderbox UserCLASS="command"
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews>openlog()</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthen this clause is silently ignored.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> clause works like <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews"priorities," except that they can also be used if you are writing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsstraight to a file rather than using <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsMessages which are not at least of the severity level given will
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsnot be selected for the channel; messages of higher severity levels
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewswill be accepted.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>If you are using <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>, then the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrewswill also determine what eventually passes through. For example,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsdefining a channel facility and severity as <B
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsonly logging <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscause messages of severity <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsbe dropped. If the situation were reversed, with <B
f4e993861df6317cf0dea2ad72f315e3c96d942aMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsmessages of only <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> or higher, then <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox Userprint all messages it received from the channel.</P
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> destination clause directs the
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox Userchannel to the server's standard error stream. This is intended for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsuse when the server is running as a foreground process, for example
0c9af52e8ff870126d837c52f1d30d8ad0608733Tinderbox Userwhen debugging a configuration.</P
8f977d4d64b0ebe562607aaa044671ed34609978Tinderbox User>The server can supply extensive debugging information when
015f044f7f916eb18d053f2e5dcbee481425bc66Mark Andrewsit is in debugging mode. If the server's global debug level is greater
8f977d4d64b0ebe562607aaa044671ed34609978Tinderbox Userthan zero, then debugging mode will be active. The global debug
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox Userlevel is set either by starting the <B
bec9d04b657e1582d2531bdc02503bebde2aa978Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> flag followed by a positive integer,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsor by running <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt>rndc trace</B
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewsmethod is not yet implemented</P
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews></BLOCKQUOTE
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews> The global debug level
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewscan be set to zero, and debugging mode turned off, by running <B
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="command"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews>. All debugging messages in the server have a debug
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewslevel, and higher debug levels give more detailed output. Channels
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewsthat specify a specific debug severity, for example:</P
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="programlisting"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews>channel "specific_debug_level" {
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews severity debug 3;
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews>will get debugging output of level 3 or less any time the
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewsserver is in debugging mode, regardless of the global debugging
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewslevel. Channels with <B
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> severity use the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsserver's global level to determine what messages to print.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>print-time</B
3a988722ad9e209ba4064604d482dc4efe0e19ebTinderbox User> has been turned on, then
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe date and time will be logged. <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>print-time</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsbe specified for a <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> channel, but is usually
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewspointless since <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> also prints the date and
351eca011cf38fd3272b325029afce144a9a1ebaMark AndrewsCLASS="command"
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews>print-category</B
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews> is requested, then the
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrewscategory of the message will be logged as well. Finally, if <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>print-severity</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewson, then the severity level of the message will be logged. The <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> options may
dda78c0f84895c174ef7206dca6082939c030792Tinderbox Userbe used in any combination, and will always be printed in the following
000b9bc9dc696babb3908802e9145562b797c1b0Tinderbox Userorder: time, category, severity. Here is an example where all three <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="computeroutput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>28-Feb-2000 15:05:32.863 general: notice: running</TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>There are four predefined channels that are used for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>'s default logging as follows. How they are
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsused is described in <A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsHREF="Bv9ARM.ch06.html#the_category_phrase"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Section 6.2.10.2</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>channel "default_syslog" {
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User syslog daemon; // end to syslog's daemon
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews severity info; // only send priority info
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews // and higher
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewschannel "default_debug" {
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews // the working directory
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews // Note: stderr is used instead
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews // if the server is started
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User // with the '-f' option.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews severity dynamic // log at the server's
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews // current debug level
dda78c0f84895c174ef7206dca6082939c030792Tinderbox Userchannel "default_stderr" { // writes to stderr
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews severity info; // only send priority info
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews // and higher
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewschannel "null" {
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews null; // toss anything sent to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews // this channel
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>default_debug</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> channel normally writes
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto a file <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> in the server's working
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsdirectory. For security reasons, when the "<TT
a5636b773fa05a272b6876afd99309c0b3090e2fMark AndrewsCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscommand line option is used, the <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsis created only after <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> has changed to the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsnew UID, and any debug output generated while <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsstarting up and still running as root is discarded. If you need
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto capture this output, you must run the server with the "<TT
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="option"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsoption and redirect standard error to a file.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Once a channel is defined, it cannot be redefined. Thus you
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscannot alter the built-in channels directly, but you can modify
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe default logging by pointing categories at channels you have defined.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="the_category_phrase"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>6.2.10.2. The <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
8fabea916f73d0b7c7371998dd041b41d1ad5296Tinderbox User>There are many categories, so you can send the logs you want
20648865f1f76c4c34cbe33c18b62cfa0cfe0fc8Tinderbox Userto see wherever you want, without seeing logs you don't want. If
20648865f1f76c4c34cbe33c18b62cfa0cfe0fc8Tinderbox Useryou don't specify a list of channels for a category, then log messages
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Huntin that category will be sent to the <B
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan HuntCLASS="command"
2706fce75f04398595d9648122c6b67164e94fccTinderbox Userinstead. If you don't specify a default category, the following
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews"default default" is used:</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>category "default" { "default_syslog"; "default_debug"; };
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>As an example, let's say you want to log security events to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsa file, but you also want keep the default logging behavior. You'd
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsspecify the following:</P
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>channel "my_security_channel" {
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews file "my_security_file";
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington severity info;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscategory "security" {
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "my_security_channel";
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "default_syslog";
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "default_debug";
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User>To discard all messages in a category, specify the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> channel:</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="programlisting"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>category "xfer-out" { "null"; };
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscategory "notify" { "null"; };
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Following are the available categories and brief descriptions
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsof the types of log information they contain. More
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscategories may be added in future <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> releases.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="informaltable"
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserCELLPADDING="3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="CALSTABLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
8f536463f9fdfa7da6a8310e4f4895373beb2961Mark AndrewsCLASS="command"
dcd42a39d311b44877161ffd1e27fa62700c0171Mark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The default category defines the logging
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsoptions for those categories where no specific configuration has been
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>The catch-all. Many things still aren't
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsclassified into categories, and they all end up here.</P
dda78c0f84895c174ef7206dca6082939c030792Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Messages relating to the databases used
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsinternally by the name server to store zone and cache data.</P
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Approval and denial of requests.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Configuration file parsing and processing.</P
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsVALIGN="MIDDLE"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="command"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserVALIGN="MIDDLE"
415d630b6309922caee8469384a6fab75cf05032Mark Andrews>DNS resolution, such as the recursive
415d630b6309922caee8469384a6fab75cf05032Mark Andrewslookups performed on behalf of clients by a caching name server.</P
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsVALIGN="MIDDLE"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="command"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsVALIGN="MIDDLE"
415d630b6309922caee8469384a6fab75cf05032Mark Andrews>Zone transfers the server is receiving.</P
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsVALIGN="MIDDLE"
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic UpdaterCLASS="command"
1ddabe157ced6d2d2ce6e9ddc1a29db588dd6908Tinderbox UserVALIGN="MIDDLE"
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark Andrews>Zone transfers the server is sending.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The NOTIFY protocol.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
06ea55a43397bc38c34a6d7e5c6219fe483edbb2Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User>Processing of client requests.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Network operations.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Dynamic updates.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1698"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> Statement Grammar</A
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User> This is the grammar of the <B
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews statement in the <TT
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="filename"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="programlisting"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="optional"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> listen-on { <TT
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="replaceable"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>address_match_list</I
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="optional"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="replaceable"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>view_name</I
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="optional"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> search { <TT
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="replaceable"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>domain_name</I
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="optional"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="replaceable"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington> ; ... </SPAN
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="optional"
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1716"
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis DupontCLASS="command"
abe52cd9882c2c27482a2781f30a34d67501fdf8Tinderbox User> Statement Definition and Usage</A
32eb4cec6f191d30c40b63e4f22647650b3bc9d4Tinderbox UserCLASS="command"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt> statement configures the name
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt server to also act as a lightweight resolver server, see
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews>Section 5.2</A
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox User>. There may be be multiple
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statements configuring
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews lightweight resolver servers with different properties.</P
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic UpdaterCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>listen-on</B
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews> statement specifies a list of
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User addresses (and ports) that this instance of a lightweight resolver daemon
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews should accept requests on. If this statement is omitted, requests
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews will be accepted on 127.0.0.1, port 53.</P
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> statement binds this instance of a
415d630b6309922caee8469384a6fab75cf05032Mark Andrews lightweight resolver daemon to a view in the DNS namespace, so that the
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt response will be constructed in the same manner as a normal DNS query
415d630b6309922caee8469384a6fab75cf05032Mark Andrews matching this view. If this statement is omitted, the default view is
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews used, and if there is no default view, an error is triggered.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> statement is equivalent to the
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="command"
415d630b6309922caee8469384a6fab75cf05032Mark Andrews> statement in
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="filename"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User>. It provides a list of domains
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis Dupont which are appended to relative names in queries.</P
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="command"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User> statement is equivalent to the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> statement in
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="filename"
3524df526a4ee88e017e218b70ea8712ff6147a1Tinderbox User>. It indicates the minimum
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews number of dots in a relative domain name that should result in an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews exact match lookup before search path elements are appended.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntNAME="AEN1735"
80eaeb6c6f1b8170a84f8faef7264bd821036e8eTinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Grammar</A
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>This is the grammar of the <B
3524df526a4ee88e017e218b70ea8712ff6147a1Tinderbox UserCLASS="command"
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson statement in the <TT
3a9593055ead76cbbb417aee2d2e656c2c92cf46Automatic UpdaterCLASS="filename"
c317b09bf112121245fafe61f38b95dc6e96acabTinderbox UserCLASS="programlisting"
8bc3d252395842452a6d2c775cf8445f6349e331Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> version <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>version_string</I
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox UserCLASS="optional"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt> directory <TT
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="replaceable"
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="optional"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt> named-xfer <TT
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="replaceable"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt>path_name</I
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark AndrewsCLASS="optional"
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews> tkey-domain <TT
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark AndrewsCLASS="replaceable"
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews>domainname</I
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="optional"
f751b1576ee6fef4023bf7101d10167e4fe520f3Tinderbox User> tkey-dhkey <TT
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox UserCLASS="replaceable"
8711e5c73ca872d59810760af0332194cbdd619bAutomatic UpdaterCLASS="replaceable"
22870a9f8df95488abe2b17ab92b7cb6a9fe6f14Tinderbox UserCLASS="optional"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt> dump-file <TT
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox UserCLASS="replaceable"
6d114a4c5cddb176ae5199eee154c0273d652ba4Tinderbox UserCLASS="optional"
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User> memstatistics-file <TT
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="replaceable"
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox UserCLASS="optional"
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User> pid-file <TT
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox UserCLASS="replaceable"
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox UserCLASS="optional"
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User> statistics-file <TT
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox UserCLASS="replaceable"
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox UserCLASS="optional"
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User> zone-statistics <TT
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox UserCLASS="replaceable"
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox UserCLASS="optional"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt> auth-nxdomain <TT
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox UserCLASS="replaceable"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="optional"
dc7e5458bbcb59ea310ed64ac7e77016e62e9c15Tinderbox User> deallocate-on-exit <TT
dc7e5458bbcb59ea310ed64ac7e77016e62e9c15Tinderbox UserCLASS="replaceable"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="optional"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="replaceable"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User>dialup_option</I
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="optional"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User> fake-iquery <TT
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="replaceable"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="optional"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User> fetch-glue <TT
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="replaceable"
36ec0d374836d070ba05b495e6f0a27f60e94476Evan Hunt>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> has-old-clients <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> host-statistics <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> multiple-cnames <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> recursion <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> rfc2308-type1 <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
aa1d397c4736cd86540555193d71e55fa3b37b2aMark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> use-id-pool <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> maintain-ixfr-base <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> forward ( <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> forwarders { [<SPAN
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> ; ... </SPAN
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> check-names ( <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> response</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> allow-notify { <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>address_match_list</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> allow-query { <TT
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox UserCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>address_match_list</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> allow-transfer { <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>address_match_list</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> allow-recursion { <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>address_match_list</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> blackhole { <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>address_match_list</I
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="optional"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews> listen-on [<SPAN
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="optional"
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox UserCLASS="replaceable"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="replaceable"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt>address_match_list</I
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="optional"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt> listen-on-v6 [<SPAN
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="optional"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="replaceable"
214af784e91553d387246fd9ce46cb1291697b9aTinderbox UserCLASS="replaceable"
72a6417eb3792914417031300a8589be63ab1102Tinderbox User>address_match_list</I
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic UpdaterCLASS="optional"
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater> query-source [<SPAN
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox UserCLASS="optional"
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User> address ( <TT
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox UserCLASS="replaceable"
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic UpdaterCLASS="replaceable"
309b912841e8b97bf0b0df0d96c3eaf16990c080Automatic UpdaterCLASS="optional"
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox UserCLASS="replaceable"
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> max-transfer-time-in <TT
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark AndrewsCLASS="replaceable"
aa1d397c4736cd86540555193d71e55fa3b37b2aMark AndrewsCLASS="optional"
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User> max-transfer-time-out <TT
9a9ca3c4f120971b7091b28a5530e5eaf362f7e6Tinderbox UserCLASS="replaceable"
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic UpdaterCLASS="optional"
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt> max-transfer-idle-in <TT
2fee8782a6fd57d86a67949092ab9197111af390Evan HuntCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> max-transfer-idle-out <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> tcp-clients <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> recursive-clients <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> serial-queries <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> transfer-format <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User>( one-answer | many-answers )</I
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> transfers-in <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> transfers-out <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> transfers-per-ns <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> transfer-source (<TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="constant"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> transfer-source-v6 (<TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="constant"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> notify-source (<TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="constant"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox UserCLASS="optional"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User> notify-source-v6 (<TT
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="replaceable"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="constant"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="optional"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> also-notify { <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="optional"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="replaceable"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="optional"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="replaceable"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="optional"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="replaceable"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User>] ; ... </SPAN
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="optional"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User> max-ixfr-log-size <TT
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="replaceable"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="optional"
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User> coresize <TT
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>size_spec</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox User> datasize <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>size_spec</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>size_spec</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> stacksize <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>size_spec</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
1ca2cf024391992fe14b2df7d3ae0f575d074452Evan Hunt> cleaning-interval <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> heartbeat-interval <TT
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserCLASS="replaceable"
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> interface-interval <TT
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statistics-interval <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> topology [<SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="replaceable"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews>address_match_list</I
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> sortlist [<SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>address_match_list</I
15ae68f3db8261770fc33b8e0f83f5d8c7021e84Mark AndrewsCLASS="optional"
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews> rrset-order [<SPAN
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsCLASS="optional"
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsCLASS="replaceable"
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User>order_spec</I
3ccf87473f7cf6d9faac156df38a935a238f96fdTinderbox UserCLASS="optional"
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>order_spec</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> ; ... </SPAN
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas GustafssonCLASS="optional"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User> lame-ttl <TT
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas GustafssonCLASS="replaceable"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterCLASS="optional"
20648865f1f76c4c34cbe33c18b62cfa0cfe0fc8Tinderbox User> max-ncache-ttl <TT
37bf3e124e8b9689ed0890e462bfc5854dc3d252Tinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
c3bf582eed0dc3ad4d865ae3a8611f0ac2d16670Tinderbox User> max-cache-ttl <TT
80eaeb6c6f1b8170a84f8faef7264bd821036e8eTinderbox UserCLASS="replaceable"
a778b94bdb66d9e0b9a497d55a401dad0bcf3a0cTinderbox UserCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> sig-validity-interval <TT
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserCLASS="replaceable"
baeaed18341c015e9ad54ffa21973184c1bc432bMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> min-roots <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan HuntCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> use-ixfr <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>yes_or_no</I
9160e27507ba636887f6352bee5cb3729108fc76Tinderbox UserCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> treat-cr-as-space <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>yes_or_no</I
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan HuntCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> min-refresh-time <TT
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserCLASS="replaceable"
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> max-refresh-time <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> min-retry-time <TT
80eaeb6c6f1b8170a84f8faef7264bd821036e8eTinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> max-retry-time <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
bd49a41f9688a35bcdc3c9217df9b7fb239e3b52Tinderbox UserCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> additional-from-auth <TT
81573f7b114a4c71c0bf47058c00fffd245323ceTinderbox UserCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="optional"
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews> additional-from-cache <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="replaceable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>yes_or_no</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="sect2"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNAME="AEN1938"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> Statement Definition and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User> statement sets up global options
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto be used by <SPAN
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan HuntCLASS="acronym"
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt>. This statement may appear only once in a configuration
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsfile. If more than one occurrence is found, the first occurrence
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrewsdetermines the actual options used, and a warning will be generated.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsIf there is no <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt> statement, an options
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsblock with each option set to its default will be used.<DIV
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserCLASS="informaltable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCELLPADDING="3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="CALSTABLE"
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserVALIGN="MIDDLE"
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserCLASS="command"
40e10611ee6a22ea17f13c15f2701385fe90ccc8Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The version the server should report
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsvia a query of name <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox UserCLASS="command"
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox UserThe default is the real version number of this server.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>directory</B
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The working directory of the server.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsAny non-absolute pathnames in the configuration file will be taken
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsas relative to this directory. The default location for most server
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>) is this directory.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsIf a directory is not specified, the working directory defaults
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>', the directory from which the server
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewswas started. The directory specified should be an absolute path.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>named-xfer</B
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="emphasis"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>This option is obsolete.</I
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserIt was used in <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 8 to specify the pathname to the <B
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>named-xfer</B
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9, no separate <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>named-xfer</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsneeded; its functionality is built into the name server.</P
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>tkey-domain</B
f39894c0b1cafb24035c14c74868e48be25f04a5Mark AndrewsVALIGN="MIDDLE"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>The domain appended to the names of all
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsshared keys generated with <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>. When a client
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsrequests a <B
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> exchange, it may or may not specify
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe desired name for the key. If present, the name of the shared
bd49a41f9688a35bcdc3c9217df9b7fb239e3b52Tinderbox Userkey will be "<TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>client specified part</TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>tkey-domain</TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsOtherwise, the name of the shared key will be "<TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="varname"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>tkey-domain</TT
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>". In most cases,
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>domainname</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> should be the server's domain
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>tkey-dhkey</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>The Diffie-Hellman key used by the server
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto generate shared keys with clients using the Diffie-Hellman mode
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>. The server must be able to load the
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox Userpublic and private keys from files in the working directory. In
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsmost cases, the keyname should be the server's host name.</P
40e10611ee6a22ea17f13c15f2701385fe90ccc8Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>dump-file</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox User>The pathname of the file the server dumps
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe database to when instructed to do so with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>rndc dumpdb</B
11ebeaa09e72d096d521155b91b7f218049a6fa9Tinderbox UserIf not specified, the default is <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="filename"
adeafa4320b38ec9e809b43a0e48f41e25ca856fTinderbox UserVALIGN="MIDDLE"
f549a65f4cbc84f2a4e5ce4ff78c30bb8f3a32d4Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>memstatistics-file</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
169f44b082b340b952e26c0fdb930c102a957752Mark Andrews>The pathname of the file the server writes memory
a8cfd15880d65b9387dc7e094a2a7ba63ea65241Mark Andrewsusage statistics to on exit. If not specified, the default is <TT
048b775e5c130c7f99965cb10fc4361df8d266aaTinderbox UserCLASS="filename"
2b7254075b883d70852a2757210793603085a0f1Tinderbox User>Not yet implemented in <SPAN
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews></BLOCKQUOTE
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
1921b850640ae984448e8b87870c8527fa9cddb6Evan HuntVALIGN="MIDDLE"
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt>The pathname of the file the server writes
1921b850640ae984448e8b87870c8527fa9cddb6Evan Huntits process ID in. If not specified, the default is operating system
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox Userdependent, but is usually
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterCLASS="filename"
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark AndrewsCLASS="filename"
7d704e522860496310bb29c28e76064868401a9cMark AndrewsThe pid-file is used by programs that want to send signals to the running
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrewsnameserver.</P
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>statistics-file</B
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>The pathname of the file the server appends statistics
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox Userto when instructed to do so using <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>rndc stats</B
384e37a497027518dd33d9c78575e58dd24a796dTinderbox UserIf not specified, the default is <TT
8ac5ddf659a81ed668579818981fc1a5f28405d1Tinderbox UserCLASS="filename"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsserver's current directory. The format of the file is described
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsHREF="Bv9ARM.ch06.html#statsfile"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Section 6.2.14.13</A
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas GustafssonVALIGN="MIDDLE"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserCLASS="command"
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark AndrewsVALIGN="MIDDLE"
c75bf330fc68e1c07cfb14631e7d3de7e2786ee7Mark Andrews> The UDP/TCP port number the server uses for receiving and sending DNS protocol traffic.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsThe default is 53. This option is mainly intended for server testing;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsa server using a port other than 53 will not be able to communicate with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe global DNS.
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> option should be placed at
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe beginning of the options block, before
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsany other options that take port numbers or IP addresses,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto ensure that the port value takes effect for all addresses
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsused by the server.</P
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark AndrewsCLASS="sect3"
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark AndrewsCLASS="sect3"
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark AndrewsNAME="boolean_options"
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews>6.2.14.1. Boolean Options</A
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark AndrewsCLASS="informaltable"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCELLPADDING="3"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="CALSTABLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox UserCLASS="command"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt>auth-nxdomain</B
1fdd58445074579ee3b65c871137a7a1740eb542Mark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0726d872f6f36901ea09321df57084614e5bb6faTinderbox User>, then the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsis always set on NXDOMAIN responses, even if the server is not actually
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsauthoritative. The default is <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsa change from <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox User> 8. If you are using very old DNS software, you
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsmay need to set it to <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
9160e27507ba636887f6352bee5cb3729108fc76Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>deallocate-on-exit</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
edd791fb53fab504d52ccdda41e6acbf543ac0d0Tinderbox User>This option was used in <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 8 to enable checking
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsfor memory leaks on exit. <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
37bf3e124e8b9689ed0890e462bfc5854dc3d252Tinderbox User> 9 ignores the option and always performs
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox Userthe checks.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan HuntCLASS="command"
3718b6ecfc40479988a9182701a4af5b3f8233f4Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsserver treats all zones as if they are doing zone transfers across
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsa dial on demand dialup link, which can be brought up by traffic
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsoriginating from this server. This has different effects according
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto zone type and concentrates the zone maintenance so that it all
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewshappens in a short interval, once every <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>heartbeat-interval</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewshopefully during the one call. It also suppresses some of the normal
40e10611ee6a22ea17f13c15f2701385fe90ccc8Tinderbox Userzone maintenance traffic. The default is <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
40e10611ee6a22ea17f13c15f2701385fe90ccc8Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsmay also be specified in the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsin which case it overrides the global <B
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe zone is a master zone then the server will send out a NOTIFY request
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsto all the slaves. This will trigger the zone serial number check
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsin the slave (providing it supports NOTIFY) allowing the slave to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsverify the zone while the connection is active.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewszone is a slave or stub zone, then the server will suppress the regular
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews"zone up to date" (refresh) queries and only perform them when the
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox UserCLASS="command"
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews>heartbeat-interval</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> expires in addition to sending
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNOTIFY requests.</P
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User>Finer control can be achieved by using
baeaed18341c015e9ad54ffa21973184c1bc432bMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> which only sends NOTIFY messages,
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserCLASS="userinput"
3718b6ecfc40479988a9182701a4af5b3f8233f4Tinderbox User>notify-passive</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> which sends NOTIFY messages and
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox Usersuppresses the normal refresh queries, <TT
16afb24a0006e01f1b9d9256b44be035b1bb2d32Tinderbox UserCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewswhich suppresses normal refresh processing and send refresh queries
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>heartbeat-interval</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> expires and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> which just disables normal refresh
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsprocessing.</P
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsVALIGN="MIDDLE"
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>fake-iquery</B
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 8, this option was used to enable simulating
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe obsolete DNS query type IQUERY. <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews> 9 never does IQUERY simulation.</P
40e10611ee6a22ea17f13c15f2701385fe90ccc8Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
40e10611ee6a22ea17f13c15f2701385fe90ccc8Tinderbox User>fetch-glue</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>This option is obsolete.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsIn BIND 8, <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>fetch-glue yes</B
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox Usercaused the server to attempt to fetch glue resource records it
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsdidn't have when constructing the additional
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsdata section of a response. This is now considered a bad idea
d0d09653ddbb5ff3c8d8bfe7537a58c3ee628157Tinderbox Userand BIND 9 never does it.</P
37bf3e124e8b9689ed0890e462bfc5854dc3d252Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>has-old-clients</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>This option was incorrectly implemented
40e10611ee6a22ea17f13c15f2701385fe90ccc8Tinderbox UserCLASS="acronym"
2b7254075b883d70852a2757210793603085a0f1Tinderbox User> 8, and is ignored by <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
5ee9f7f23852d92772c08ca6e4b46c549beaf660Mark AndrewsTo achieve the intended effect
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>has-old-clients</B
80eaeb6c6f1b8170a84f8faef7264bd821036e8eTinderbox UserCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe two separate options <B
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>auth-nxdomain</B
3fb635d1c5fad0b7380b8195750dc1057bb1abd6Tinderbox UserCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>rfc2308-type1</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> instead.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>host-statistics</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
5835beb229e17d583fb4b6fd4246bd014a68ddf6Tinderbox User>In BIND 8, this enables keeping of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsstatistics for every host that the nameserver interacts with.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNot implemented in BIND 9.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
2b7254075b883d70852a2757210793603085a0f1Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>maintain-ixfr-base</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="emphasis"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>This option is obsolete</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews It was used in <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 8 to determine whether a transaction log was
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewskept for Incremental Zone Transfer. <SPAN
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9 maintains a transaction
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewslog whenever possible. If you need to disable outgoing incremental zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewstransfers, use <B
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsCLASS="command"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt>provide-ixfr</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>multiple-cnames</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
ebe53509ca55a141131c104b6d722236b606e0efTinderbox User>This option was used in <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsa domain name to allow multiple CNAME records in violation of the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsDNS standards. <SPAN
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9.1 always strictly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsenforces the CNAME rules both in master files and dynamic updates.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> (the default),
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsDNS NOTIFY messages are sent when a zone the server is authoritative for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewschanges, see <A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Section 3.3</A
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>. The messages are sent to the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsservers listed in the zone's NS records (except the master server identified
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsin the SOA MNAME field), and to any servers listed in the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>also-notify</B
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas GustafssonCLASS="userinput"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>, notifies are sent only to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsservers explicitly listed using <B
bd7a552249814fa4b03c69418c8d6828fc013f6bTinderbox UserCLASS="command"
20648865f1f76c4c34cbe33c18b62cfa0cfe0fc8Tinderbox User>also-notify</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>, no notifies are sent.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> option may also be specified in the <B
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox UserCLASS="command"
bd7a552249814fa4b03c69418c8d6828fc013f6bTinderbox Userin which case it overrides the <B
bd7a552249814fa4b03c69418c8d6828fc013f6bTinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>options notify</B
cb5446c26093277f40e4c02c9eafcd9e50535994Tinderbox UserIt would only be necessary to turn off this option if it caused slaves
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas GustafssonCLASS="varname"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>recursion</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsDNS query requests recursion, then the server will attempt to do
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsall the work required to answer the query. If recursion is off
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsand the server does not already know the answer, it will return a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsreferral response. The default is <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsNote that setting <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>recursion no;</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> does not prevent
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox Userclients from getting data from the server's cache; it only
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsprevents new data from being cached as an effect of client queries.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCaching may still occur as an effect the server's internal
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsoperation, such as NOTIFY address lookups.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>fetch-glue</B
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsVALIGN="MIDDLE"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>rfc2308-type1</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews>Setting this to <TT
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrewscause the server to send NS records along with the SOA record for negative
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsanswers. The default is <TT
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="userinput"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews>Not yet implemented in <SPAN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews></BLOCKQUOTE
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
d0d09653ddbb5ff3c8d8bfe7537a58c3ee628157Tinderbox UserCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>use-id-pool</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="emphasis"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>This option is obsolete</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="acronym"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> 9 always allocates query IDs from a pool.</P
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>zone-statistics</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="userinput"
415d630b6309922caee8469384a6fab75cf05032Mark Andrews>, the server will, by default, collect
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrewsstatistical data on all zones in the server. These statistics may be accessed
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntCLASS="command"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt>rndc stats</B
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt>, which will dump them to the file listed
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="command"
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User>statistics-file</B
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt>. See also <A
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsHREF="Bv9ARM.ch06.html#statsfile"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt>Section 6.2.14.13</A
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsVALIGN="MIDDLE"
415d630b6309922caee8469384a6fab75cf05032Mark AndrewsCLASS="command"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntVALIGN="MIDDLE"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntCLASS="emphasis"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>This option is obsolete</I
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsIf you need to disable IXFR to a particular server or servers see
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsthe information on the <B
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox UserCLASS="command"
5835beb229e17d583fb4b6fd4246bd014a68ddf6Tinderbox User>provide-ixfr</B
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsHREF="Bv9ARM.ch06.html#server_statement_definition_and_usage"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Section 6.2.16</A
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox UserHREF="Bv9ARM.ch04.html#incremental_zone_transfers"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Section 4.2</A
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntVALIGN="MIDDLE"
bed0874e1a09e810575328c4bfc346a47514b69fMark AndrewsCLASS="command"
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews>treat-cr-as-space</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews>This option was used in <SPAN
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas GustafssonCLASS="acronym"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userthe server treat carriage return ("<B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>") characters the same way
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useras a space or tab character,
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userto facilitate loading of zone files on a UNIX system that were generated
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useron an NT or DOS machine. In <SPAN
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="acronym"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews> 9, both UNIX "<B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>" newlines are always accepted,
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userand the option is ignored.</P
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>min-refresh-time</B
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="command"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews>max-refresh-time</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>min-retry-time</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>max-retry-time</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> These options control the server's behavior on refreshing a zone
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User(querying for SOA changes) or retrying failed transfers.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserUsually the SOA values for the zone are used, but these values
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userare set by the master, giving slave server administrators little
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Usercontrol over their contents.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> These options allow the administrator to set a minimum and maximum
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userrefresh and retry time either per-zone, per-view, or per-server.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserThese options are valid for master, slave and stub zones, and clamp the SOA
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userrefresh and retry times to the specified values.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater>additional-from-auth</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>additional-from-cache</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> These options control the server's behavior when answering queries
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userwhich have additional data, or when following CNAME and DNAME
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userchains to provide additional data.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> When both of these options are set to <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User(the default) and a
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userquery is being answered from authoratitive data (a zone
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userconfigured into the server), the additional data section of the
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrewsreply will be filled in using data from other authoratitive zones
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userand from the cache. In some situations this is undesirable, such
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useras when there is concern over the correctness of the cache, or in
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userin servers where slave zones may be added and modified by
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useruntrusted third parties. Also, avoiding
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userthe search for this additional data will speed up server operations
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userat the possible expense of additional queries to resolve what would
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userotherwise be provided in the additional section.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews> For example, if a query asks for an MX record for host <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="literal"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userand the record found is "<TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="literal"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>", normally the address
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userrecords (A, A6, and AAAA) for <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="literal"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> will be provided as well,
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userif known. These options disable this behavior.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserNAME="AEN2247"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>6.2.14.2. Forwarding</A
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews>The forwarding facility can be used to create a large site-wide
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Usercache on a few servers, reducing traffic over links to external
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Usernameservers. It can also be used to allow queries by servers that
3d2e052eb879189e6d853097f8b568d887323bebTinderbox Userdo not have direct access to the Internet, but wish to look up exterior
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Usernames anyway. Forwarding occurs only on those queries for which
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userthe server is not authoritative and does not have the answer in
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="informaltable"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCELLPADDING="3"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="CALSTABLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>This option is only meaningful if the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userforwarders list is not empty. A value of <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="varname"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userthe default, causes the server to query the forwarders first, and
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userif that doesn't answer the question the server will then look for
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userthe answer itself. If <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="varname"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> is specified, the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userserver will only query the forwarders.</P
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>forwarders</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater>Specifies the IP addresses to be used
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userfor forwarding. The default is the empty list (no forwarding).</P
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>Forwarding can also be configured on a per-domain basis, allowing
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrewsfor the global forwarding options to be overridden in a variety
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userof ways. You can set particular domains to use different forwarders,
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useror have a different <B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useror not forward at all, see <A
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserHREF="Bv9ARM.ch06.html#zone_statement_grammar"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>Section 6.2.21</A
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="sect3"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserNAME="access_control"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>6.2.14.3. Access Control</A
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>Access to the server can be restricted based on the IP address
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userof the requesting system. See <A
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserHREF="Bv9ARM.ch06.html#address_match_lists"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>Section 6.1.1</A
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userdetails on how to specify IP address lists.</P
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="informaltable"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCELLPADDING="3"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="CALSTABLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>allow-notify</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>Specifies which hosts are allowed to
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Usernotify slaves of a zone change in addition to the zone masters.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>allow-notify</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> may also be specified in the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews> statement, in which case it overrides the
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="command"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews>options allow-notify</B
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews> statement. It is only meaningful
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userfor a slave zone. If not specified, the default is to process notify messages
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useronly from a zone's master.</P
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>allow-query</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Specifies which hosts are allowed to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsask ordinary questions. <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>allow-query</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsbe specified in the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statement, in which
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewscase it overrides the <B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>options allow-query</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews> statement. If
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsnot specified, the default is to allow queries from all hosts.</P
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsCLASS="command"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>allow-recursion</B
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark AndrewsVALIGN="MIDDLE"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews>Specifies which hosts are allowed to
adeafa4320b38ec9e809b43a0e48f41e25ca856fTinderbox Usermake recursive queries through this server. If not specified, the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsdefault is to allow recursive queries from all hosts.
edd791fb53fab504d52ccdda41e6acbf543ac0d0Tinderbox UserNote that disallowing recursive queries for a host does not prevent the
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox Userhost from retrieving data that is already in the server's cache.
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserVALIGN="MIDDLE"
8927a982bde7e4b665966b55f0fa57c5cf21b9d8Mark AndrewsCLASS="command"
HREF="Bv9ARM.ch06.html#configuration_file_elements"
HREF="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them"
HREF="Bv9ARM.ch06.html#topology"
> 4.9.x. Responses sent
class IN type A name "host.example.com" order random;
HREF="Bv9ARM.ch04.html#dynamic_update"
HREF="Bv9ARM.ch04.html#DNSSEC"
// Provide a complete view of the example.com zone
zone "example.com" {
file "example-internal.db";
// Provide a restricted view of the example.com zone
zone "example.com" {
file "example-external.db";
HREF="Bv9ARM.ch06.html#access_control"
HREF="Bv9ARM.ch06.html#access_control"
HREF="Bv9ARM.ch06.html#access_control"
HREF="Bv9ARM.ch06.html#dynamic_update_policies"
HREF="Bv9ARM.ch07.html#dynamic_update_security"
HREF="Bv9ARM.ch06.html#boolean_options"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#boolean_options"
HREF="Bv9ARM.ch06.html#tuning"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#the_sortlist_statement"
HREF="Bv9ARM.ch06.html#rrset_ordering"
HREF="Bv9ARM.ch09.html#classes_of_resource_records"
and PTR records. Entries in the in-addr.arpa domain are made in
in-addr.arpa name of
3.2.1.10.in-addr.arpa. This name should have a PTR resource record
>$ORIGIN example.com
sub /24 reverse delegations described in RFC 2317: Classless IN-ADDR.ARPA
>$ORIGIN 0.0.192.IN-ADDR.ARPA.
HREF="Bv9ARM.ch05.html"
HREF="Bv9ARM.html"
HREF="Bv9ARM.ch07.html"