man.named.conf.html revision a179cbdf652095d00e7774320592f25eab0210d8
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson - Copyright (C) 2000-2003 Internet Software Consortium.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews - Permission to use, copy, modify, and/or distribute this software for any
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson - purpose with or without fee is hereby granted, provided that the above
ec5347e2c775f027573ce5648b910361aa926c01Automatic Updater - copyright notice and this permission notice appear in all copies.
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
19c7b1a0293498a3e36692c59646ed6e15ffc8d0Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<link rel="prev" href="man.named.html" title="named">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<link rel="next" href="man.named-checkconf.html" title="named-checkconf">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<tr><th colspan="3" align="center"><code class="filename">named.conf</code></th></tr>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<a accesskey="p" href="man.named.html">Prev</a>�</td>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<td width="20%" align="right">�<a accesskey="n" href="man.named-checkconf.html">Next</a>
19c7b1a0293498a3e36692c59646ed6e15ffc8d0Tinderbox User<a name="man.named.conf"></a><div class="titlepage"></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<p><code class="filename">named.conf</code> — configuration file for <span class="command"><strong>named</strong></span></p>
f5d30e2864e048a42c4dc1134993ae7efdb5d6c3Mark Andrews<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<p><code class="filename">named.conf</code> is the configuration file
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span class="command"><strong>named</strong></span>. Statements are enclosed
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein in braces and terminated with a semi-colon. Clauses in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein the statements are also semi-colon terminated. The usual
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein comment styles are supported:
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson C style: /* */
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson C++ style: // to end of line
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Unix style: # to end of line
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafssonacl�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinkey�<em class="replaceable"><code>domain_name</code></em>�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein algorithm�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein secret�<em class="replaceable"><code>string</code></em>;<br>
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson<a name="id-1.14.17.10"></a><h2>MASTERS</h2>
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssonmasters�<em class="replaceable"><code>string</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson (�<em class="replaceable"><code>masters</code></em>�|�<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson <em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinserver�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt bogus�<em class="replaceable"><code>boolean</code></em>;<br>
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark Andrews edns�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tcp-only�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein keys�<em class="replaceable"><code>server_key</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfers�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfer-format�(�many-answers�|�one-answer�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein support-ixfr�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<a name="id-1.14.17.12"></a><h2>TRUSTED-KEYS</h2>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeintrusted-keys�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="replaceable"><code>domain_name</code></em>�<em class="replaceable"><code>flags</code></em>�<em class="replaceable"><code>protocol</code></em>�<em class="replaceable"><code>algorithm</code></em>�<em class="replaceable"><code>key</code></em>;�...<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<a name="id-1.14.17.13"></a><h2>MANAGED-KEYS</h2>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinmanaged-keys�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="replaceable"><code>domain_name</code></em>�<code class="constant">initial-key</code>�<em class="replaceable"><code>flags</code></em>�<em class="replaceable"><code>protocol</code></em>�<em class="replaceable"><code>algorithm</code></em>�<em class="replaceable"><code>key</code></em>;�...<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeincontrols�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein inet�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>]<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow�{�<em class="replaceable"><code>address_match_element</code></em>;�...�}<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�keys�{�<em class="replaceable"><code>string</code></em>;�...�}�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein unix�<em class="replaceable"><code>unsupported</code></em>;�//�not�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinlogging�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein channel�<em class="replaceable"><code>string</code></em>�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein file�<em class="replaceable"><code>log_file</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein syslog�<em class="replaceable"><code>optional_facility</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein severity�<em class="replaceable"><code>log_severity</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein print-time�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein print-severity�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein print-category�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein category�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein (�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein search�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein ndots�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein lwres-tasks�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein lwres-clients�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinoptions�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein avoid-v4-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein avoid-v6-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein blackhole�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein coresize�<em class="replaceable"><code>size</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein datasize�<em class="replaceable"><code>size</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dump-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein files�<em class="replaceable"><code>size</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein heartbeat-interval�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein host-statistics�<em class="replaceable"><code>boolean</code></em>;�//�not�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein host-statistics-max�<em class="replaceable"><code>number</code></em>;�//�not�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein hostname�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein interface-interval�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein keep-response-order�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein listen-on-v6�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein match-mapped-addresses�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein memstatistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein pid-file�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein port�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein querylog�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein recursing-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein reserved-sockets�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein random-device�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein recursive-clients�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein serial-query-rate�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein server-id�(�<em class="replaceable"><code>quoted_string</code></em>�|�hostname�|�none�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein stacksize�<em class="replaceable"><code>size</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein statistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein statistics-interval�<em class="replaceable"><code>integer</code></em>;�//�not�yet�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tcp-clients�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tcp-listen-queue�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tkey-dhkey�<em class="replaceable"><code>quoted_string</code></em>�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tkey-gssapi-credential�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tkey-gssapi-keytab�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tkey-domain�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfer-message-size�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfers-per-ns�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfers-in�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfers-out�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein version�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-recursion�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-recursion-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein sortlist�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein auth-nxdomain�<em class="replaceable"><code>boolean</code></em>;�//�default�changed<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein minimal-responses�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein recursion�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein rrset-order�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein rfc2308-type1�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein additional-from-auth�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein additional-from-cache�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein use-queryport-pool�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein queryport-pool-ports�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein queryport-pool-updateinterval�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein cleaning-interval�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein resolver-query-timeout�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein min-roots�<em class="replaceable"><code>integer</code></em>;�//�not�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein lame-ttl�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-ncache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-cache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfer-format�(�many-answers�|�one-answer�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-cache-size�<em class="replaceable"><code>size</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-acache-size�<em class="replaceable"><code>size</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein check-names�(�master�|�slave�|�response�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein (�fail�|�warn�|�ignore�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein check-mx�(�fail�|�warn�|�ignore�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein check-mx-cname�(�fail�|�warn�|�ignore�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein check-srv-cname�(�fail�|�warn�|�ignore�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein cache-file�<em class="replaceable"><code>quoted_string</code></em>;�//�test�option<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein preferred-glue�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein (�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein disable-ds-digests�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dnssec-enable�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dnssec-validation�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dnssec-lookaside�(�<em class="replaceable"><code>auto</code></em>�|�<em class="replaceable"><code>no</code></em>�|�<em class="replaceable"><code>domain</code></em>�trust-anchor�<em class="replaceable"><code>domain</code></em>�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dnssec-accept-expired�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dns64-server�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dns64-contact�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dns64�<em class="replaceable"><code>prefix</code></em>�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein clients�{�<em class="replaceable"><code>acl</code></em>;�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein exclude�{�<em class="replaceable"><code>acl</code></em>;�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein mapped�{�<em class="replaceable"><code>acl</code></em>;�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein break-dnssec�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein recursive-only�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein suffix�<em class="replaceable"><code>ipv6_address</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein empty-server�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein empty-contact�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein empty-zones-enable�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein disable-empty-zone�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein ixfr-from-differences�<em class="replaceable"><code>ixfrdiff</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-query-cache�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-query-cache-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dnssec-dnskey-kskonly�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein masterfile-format�(�text�|�raw�|�map�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein notify�<em class="replaceable"><code>notifytype</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�key�<em class="replaceable"><code>keyname</code></em>�</span>]�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein forward�(�first�|�only�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt (�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark Andrews max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt sig-re-signing-interval�<em class="replaceable"><code>integer</code></em>;<br>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt sig-signing-nodes�<em class="replaceable"><code>integer</code></em>;<br>
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark Andrews sig-signing-signatures�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein sig-signing-type�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein managed-keys-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein auto-dnssec�<code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">off</code>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein zero-no-soa-ttl-cache�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dnssec-secure-to-insecure�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein cookie-algorithm�(�<em class="replaceable"><code>aes</code></em>�|�<em class="replaceable"><code>sha1</code></em>�|�<em class="replaceable"><code>sha256</code></em>�);<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein cookie-secret�<em class="replaceable"><code>string</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein require-server-cookie�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein send-cookie�<em class="replaceable"><code>boolean</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein nocookie-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein deny-answer-addresses�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="replaceable"><code>address_match_list</code></em><br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein }�[<span class="optional">�except-from�{�<em class="replaceable"><code>namelist</code></em>�}�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein deny-answer-aliases�{<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="replaceable"><code>namelist</code></em><br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein }�[<span class="optional">�except-from�{�<em class="replaceable"><code>namelist</code></em>�}�</span>];<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein nsec3-test-zone�<em class="replaceable"><code>boolean</code></em>;��//�testing�only<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein deallocate-on-exit�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein fake-iquery�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein fetch-glue�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein has-old-clients�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein multiple-cnames�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt named-xfer�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt serial-queries�<em class="replaceable"><code>integer</code></em>;�//�obsolete<br>
view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
server�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;<br>
topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
disable-ds-digests�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
dnssec-lookaside�(�<em class="replaceable"><code>auto</code></em>�|�<em class="replaceable"><code>no</code></em>�|�<em class="replaceable"><code>domain</code></em>�trust-anchor�<em class="replaceable"><code>domain</code></em>�);<br>
dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
masters�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
update-policy�<em class="replaceable"><code>local</code></em>�|�<em class="replaceable"><code>�{<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>