235N/A

235N/AThis is a summary of the named.conf options supported by

822N/Athis version of BIND 9.

822N/A

822N/Aacl <string> { <address_match_element>; ... };

235N/A

1252N/Acontrols {

235N/A inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

235N/A ) ] allow { <address_match_element>; ... } [ keys { <string>;

919N/A ... } ];

919N/A unix <quoted_string> perm <integer> owner <integer> group <integer>

919N/A [ keys { <string>; ... } ];

919N/A};

919N/A

919N/Adlz <string> {

919N/A database <string>;

919N/A};

919N/A

919N/Akey <string> {

919N/A algorithm <string>;

919N/A secret <string>;

919N/A};

919N/A

919N/Alogging {

919N/A category <string> { <string>; ... };

919N/A channel <string> {

235N/A file <quoted_string> [ versions ( "unlimited" | <integer> )

235N/A ] [ size <size> ];

235N/A null;

822N/A print-category <boolean>;

235N/A print-severity <boolean>;

970N/A print-time <boolean>;

970N/A severity <log_severity>;

970N/A stderr;

970N/A syslog <optional_facility>;

970N/A };

970N/A};

970N/A

1003N/Alwres {

970N/A listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

235N/A [ port <integer> ]; ... };

1252N/A ndots <integer>;

235N/A search { <string>; ... };

911N/A view <string> <optional_class>;

1252N/A};

1252N/A

911N/Amanaged-keys { <string> <string> <integer> <integer> <integer>

235N/A <quoted_string>; ... };

493N/A

493N/Amasters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port

235N/A <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };

235N/A

235N/Aoptions {

235N/A acache-cleaning-interval <integer>;

822N/A acache-enable <boolean>;

235N/A additional-from-auth <boolean>;

1124N/A additional-from-cache <boolean>;

1124N/A allow-new-zones <boolean>;

1124N/A allow-notify { <address_match_element>; ... };

235N/A allow-query { <address_match_element>; ... };

1252N/A allow-query-cache { <address_match_element>; ... };

235N/A allow-query-cache-on { <address_match_element>; ... };

235N/A allow-query-on { <address_match_element>; ... };

235N/A allow-recursion { <address_match_element>; ... };

1333N/A allow-recursion-on { <address_match_element>; ... };

1276N/A allow-transfer { <address_match_element>; ... };

1276N/A allow-update { <address_match_element>; ... };

1333N/A allow-update-forwarding { <address_match_element>; ... };

1276N/A allow-v6-synthesis { <address_match_element>; ... }; // obsolete

1276N/A also-notify [ port <integer> ] { ( <masters> | <ipv4_address> [

1276N/A port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key

1276N/A <string> ]; ... };

1276N/A alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

1276N/A alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

1276N/A * ) ];

1276N/A attach-cache <string>;

1276N/A auth-nxdomain <boolean>; // default changed

235N/A avoid-v4-udp-ports { <portrange>; ... };

1124N/A avoid-v6-udp-ports { <portrange>; ... };

1124N/A bindkeys-file <quoted_string>;

1124N/A blackhole { <address_match_element>; ... };

970N/A cache-file <quoted_string>;

970N/A check-dup-records ( fail | warn | ignore );

970N/A check-integrity <boolean>;

970N/A check-mx ( fail | warn | ignore );

970N/A check-mx-cname ( fail | warn | ignore );

970N/A check-names ( master | slave | response ) ( fail | warn | ignore );

970N/A check-sibling <boolean>;

947N/A check-srv-cname ( fail | warn | ignore );

235N/A check-wildcard <boolean>;

247N/A cleaning-interval <integer>;

947N/A clients-per-query <integer>;

235N/A coresize <size>;

247N/A datasize <size>;

947N/A deallocate-on-exit <boolean>; // obsolete

947N/A deny-answer-addresses { <address_match_element>; ... } [

970N/A except-from { <quoted_string>; ... } ];

970N/A deny-answer-aliases { <quoted_string>; ... } [ except-from {

947N/A <quoted_string>; ... } ];

947N/A dialup <dialuptype>;

947N/A directory <quoted_string>;

947N/A disable-algorithms <string> { <string>; ... };

947N/A disable-empty-zone <string>;

947N/A dns64 <netprefix> {

235N/A break-dnssec <boolean>;

241N/A clients { <address_match_element>; ... };

493N/A exclude { <address_match_element>; ... };

493N/A mapped { <address_match_element>; ... };

235N/A recursive-only <boolean>;

1270N/A suffix <ipv6_address>;

1270N/A };

1270N/A dns64-contact <string>;

1270N/A dns64-server <string>;

493N/A dnssec-accept-expired <boolean>;

493N/A dnssec-dnskey-kskonly <boolean>;

1124N/A dnssec-enable <boolean>;

963N/A dnssec-loadkeys-interval <integer>;

1124N/A dnssec-lookaside ( <string> trust-anchor <string> | auto );

1124N/A dnssec-must-be-secure <string> <boolean>;

1097N/A dnssec-secure-to-insecure <boolean>;

493N/A dnssec-update-mode ( maintain | no-resign );

1097N/A dnssec-validation ( yes | no | auto );

1097N/A dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

493N/A <integer> ] | <ipv4_address> [ port <integer> ] |

235N/A <ipv6_address> [ port <integer> ] ); ... };

1124N/A dump-file <quoted_string>;

1124N/A edns-udp-size <integer>;

1124N/A empty-contact <string>;

1124N/A empty-server <string>;

1124N/A empty-zones-enable <boolean>;

1124N/A fake-iquery <boolean>; // obsolete

1124N/A fetch-glue <boolean>; // obsolete

1124N/A files <size>;

1124N/A filter-aaaa { <address_match_element>; ... }; // not configured

1124N/A filter-aaaa-on-v4 <v4_aaaa>; // not configured

970N/A flush-zones-on-shutdown <boolean>;

970N/A forward ( first | only );

970N/A forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

1097N/A [ port <integer> ]; ... };

1097N/A has-old-clients <boolean>; // obsolete

1097N/A heartbeat-interval <integer>;

1030N/A host-statistics <boolean>; // not implemented

822N/A host-statistics-max <integer>; // not implemented

235N/A hostname ( <quoted_string> | none );

235N/A inline-signing <boolean>;

822N/A interface-interval <integer>;

822N/A ixfr-from-differences <ixfrdiff>;

963N/A key-directory <quoted_string>;

963N/A lame-ttl <integer>;

935N/A listen-on [ port <integer> ] { <address_match_element>; ... };

935N/A listen-on-v6 [ port <integer> ] { <address_match_element>; ... };

935N/A maintain-ixfr-base <boolean>; // obsolete

935N/A managed-keys-directory <quoted_string>;

935N/A masterfile-format ( text | raw );

1088N/A match-mapped-addresses <boolean>;

235N/A max-acache-size <size_no_default>;

935N/A max-cache-size <size_no_default>;

963N/A max-cache-ttl <integer>;

963N/A max-clients-per-query <integer>;

935N/A max-ixfr-log-size <size>; // obsolete

963N/A max-journal-size <size_no_default>;

963N/A max-ncache-ttl <integer>;

963N/A max-refresh-time <integer>;

963N/A max-retry-time <integer>;

235N/A max-transfer-idle-in <integer>;

963N/A max-transfer-idle-out <integer>;

235N/A max-transfer-time-in <integer>;

935N/A max-transfer-time-out <integer>;

935N/A max-udp-size <integer>;

963N/A memstatistics <boolean>;

963N/A memstatistics-file <quoted_string>;

935N/A min-refresh-time <integer>;

963N/A min-retry-time <integer>;

963N/A min-roots <integer>; // not implemented

1333N/A minimal-responses <boolean>;

963N/A multi-master <boolean>;

235N/A multiple-cnames <boolean>; // obsolete

493N/A named-xfer <quoted_string>; // obsolete

1252N/A notify <notifytype>;

1252N/A notify-delay <integer>;

1252N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

1252N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

1252N/A notify-to-soa <boolean>;

1252N/A nsec3-test-zone <boolean>; // test only

1252N/A pid-file ( <quoted_string> | none );

1252N/A port <integer>;

1252N/A preferred-glue <string>;

1252N/A provide-ixfr <boolean>;

822N/A query-source <querysource4>;

1296N/A query-source-v6 <querysource6>;

1296N/A querylog <boolean>;

1296N/A queryport-pool-ports <integer>; // obsolete

493N/A queryport-pool-updateinterval <integer>; // obsolete

822N/A random-device <quoted_string>;

241N/A recursing-file <quoted_string>;

235N/A recursion <boolean>;

1333N/A recursive-clients <integer>;

1333N/A request-ixfr <boolean>;

235N/A request-nsid <boolean>;

1265N/A reserved-sockets <integer>;

1265N/A resolver-query-timeout <integer>;

1265N/A response-policy {

493N/A zone <string> [ policy ( given | no-op | nxdomain | nodata

235N/A | cname <domain> ) ];

606N/A };

606N/A rfc2308-type1 <boolean>; // not yet implemented

606N/A root-delegation-only [ exclude { <quoted_string>; ... } ];

606N/A rrset-order { [ class <string> ] [ type <string> ] [ name

235N/A <quoted_string> ] <string> <string>; ... };

922N/A secroots-file <quoted_string>;

235N/A serial-queries <integer>; // obsolete

599N/A serial-query-rate <integer>;

1124N/A serial-update-method ( increment | unixtime );

235N/A server-id ( <quoted_string> | none | hostname );

822N/A session-keyalg <string>;

1147N/A session-keyfile ( <quoted_string> | none );

1147N/A session-keyname <string>;

1124N/A sig-signing-nodes <integer>;

606N/A sig-signing-signatures <integer>;

606N/A sig-signing-type <integer>;

606N/A sig-validity-interval <integer> [ <integer> ];

235N/A sortlist { <address_match_element>; ... };

1030N/A stacksize <size>;

235N/A statistics-file <quoted_string>;

606N/A statistics-interval <integer>; // not yet implemented

606N/A suppress-initial-notify <boolean>; // not yet implemented

1097N/A tcp-clients <integer>;

822N/A tcp-listen-queue <integer>;

822N/A tkey-dhkey <quoted_string> <integer>;

1030N/A tkey-domain <quoted_string>;

963N/A tkey-gssapi-credential <quoted_string>;

235N/A tkey-gssapi-keytab <quoted_string>;

235N/A topology { <address_match_element>; ... }; // not implemented

247N/A transfer-format ( many-answers | one-answer );

822N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

1019N/A transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

1030N/A transfers-in <integer>;

1030N/A transfers-out <integer>;

1030N/A transfers-per-ns <integer>;

1030N/A treat-cr-as-space <boolean>; // obsolete

963N/A try-tcp-refresh <boolean>;

235N/A update-check-ksk <boolean>;

963N/A use-alt-transfer-source <boolean>;

235N/A use-id-pool <boolean>; // obsolete

963N/A use-ixfr <boolean>;

235N/A use-queryport-pool <boolean>; // obsolete

963N/A use-v4-udp-ports { <portrange>; ... };

247N/A use-v6-udp-ports { <portrange>; ... };

963N/A version ( <quoted_string> | none );

963N/A zero-no-soa-ttl <boolean>;

822N/A zero-no-soa-ttl-cache <boolean>;

963N/A zone-statistics <boolean>;

980N/A};

822N/A

822N/Aserver <netprefix> {

822N/A bogus <boolean>;

822N/A edns <boolean>;

822N/A edns-udp-size <integer>;

822N/A keys <server_key>;

822N/A max-udp-size <integer>;

1124N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

1124N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

1124N/A provide-ixfr <boolean>;

822N/A query-source <querysource4>;

822N/A query-source-v6 <querysource6>;

822N/A request-ixfr <boolean>;

822N/A support-ixfr <boolean>; // obsolete

822N/A transfer-format ( many-answers | one-answer );

822N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

822N/A transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

822N/A transfers <integer>;

822N/A};

1124N/A

1124N/Astatistics-channels {

822N/A inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

963N/A ) ] [ allow { <address_match_element>; ... } ];

1124N/A};

970N/A

970N/Atrusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

970N/A

970N/Aview <string> <optional_class> {

970N/A acache-cleaning-interval <integer>;

970N/A acache-enable <boolean>;

970N/A additional-from-auth <boolean>;

970N/A additional-from-cache <boolean>;

970N/A allow-new-zones <boolean>;

970N/A allow-notify { <address_match_element>; ... };

970N/A allow-query { <address_match_element>; ... };

970N/A allow-query-cache { <address_match_element>; ... };

970N/A allow-query-cache-on { <address_match_element>; ... };

970N/A allow-query-on { <address_match_element>; ... };

970N/A allow-recursion { <address_match_element>; ... };

970N/A allow-recursion-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-v6-synthesis { <address_match_element>; ... }; // obsolete

also-notify [ port <integer> ] { ( <masters> | <ipv4_address> [

port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key

<string> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ];

attach-cache <string>;

auth-nxdomain <boolean>; // default changed

cache-file <quoted_string>;

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( master | slave | response ) ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

cleaning-interval <integer>;

clients-per-query <integer>;

database <string>;

deny-answer-addresses { <address_match_element>; ... } [

except-from { <quoted_string>; ... } ];

deny-answer-aliases { <quoted_string>; ... } [ except-from {

<quoted_string>; ... } ];

dialup <dialuptype>;

disable-algorithms <string> { <string>; ... };

disable-empty-zone <string>;

dlz <string> {

database <string>;

};

dns64 <netprefix> {

break-dnssec <boolean>;

clients { <address_match_element>; ... };

exclude { <address_match_element>; ... };

mapped { <address_match_element>; ... };

recursive-only <boolean>;

suffix <ipv6_address>;

};

dns64-contact <string>;

dns64-server <string>;

dnssec-accept-expired <boolean>;

dnssec-dnskey-kskonly <boolean>;

dnssec-enable <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-lookaside ( <string> trust-anchor <string> | auto );

dnssec-must-be-secure <string> <boolean>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

dnssec-validation ( yes | no | auto );

dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

<integer> ] | <ipv4_address> [ port <integer> ] |

<ipv6_address> [ port <integer> ] ); ... };

edns-udp-size <integer>;

empty-contact <string>;

empty-server <string>;

empty-zones-enable <boolean>;

fetch-glue <boolean>; // obsolete

filter-aaaa { <address_match_element>; ... }; // not configured

filter-aaaa-on-v4 <v4_aaaa>; // not configured

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

inline-signing <boolean>;

ixfr-from-differences <ixfrdiff>;

key <string> {

algorithm <string>;

secret <string>;

};

key-directory <quoted_string>;

lame-ttl <integer>;

maintain-ixfr-base <boolean>; // obsolete

managed-keys { <string> <string> <integer> <integer> <integer>

<quoted_string>; ... };

masterfile-format ( text | raw );

match-clients { <address_match_element>; ... };

match-destinations { <address_match_element>; ... };

match-recursive-only <boolean>;

max-acache-size <size_no_default>;

max-cache-size <size_no_default>;

max-cache-ttl <integer>;

max-clients-per-query <integer>;

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-ncache-ttl <integer>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-udp-size <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

min-roots <integer>; // not implemented

minimal-responses <boolean>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

preferred-glue <string>;

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

queryport-pool-ports <integer>; // obsolete

queryport-pool-updateinterval <integer>; // obsolete

recursion <boolean>;

request-ixfr <boolean>;

request-nsid <boolean>;

resolver-query-timeout <integer>;

response-policy {

zone <string> [ policy ( given | no-op | nxdomain | nodata

| cname <domain> ) ];

};

rfc2308-type1 <boolean>; // not yet implemented

root-delegation-only [ exclude { <quoted_string>; ... } ];

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

serial-update-method ( increment | unixtime );

server <netprefix> {

bogus <boolean>;

edns <boolean>;

edns-udp-size <integer>;

keys <server_key>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

request-ixfr <boolean>;

support-ixfr <boolean>; // obsolete

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

transfers <integer>;

};

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

sortlist { <address_match_element>; ... };

suppress-initial-notify <boolean>; // not yet implemented

topology { <address_match_element>; ... }; // not implemented

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

trusted-keys { <string> <integer> <integer> <integer>

<quoted_string>; ... };

try-tcp-refresh <boolean>;

update-check-ksk <boolean>;

use-alt-transfer-source <boolean>;

use-queryport-pool <boolean>; // obsolete

zero-no-soa-ttl <boolean>;

zero-no-soa-ttl-cache <boolean>;

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] { ( <masters> |

<ipv4_address> [ port <integer> ] | <ipv6_address> [

port <integer> ] ) [ key <string> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port (

<integer> | * ) ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

auto-dnssec ( allow | maintain | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dnssec-dnskey-kskonly <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> |

<ipv6_address> ) [ port <integer> ]; ... };

inline-signing <boolean>;

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw );

masters [ port <integer> ] { ( <masters> | <ipv4_address> [

port <integer> ] | <ipv6_address> [ port <integer> ] )

[ key <string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer>

<quoted_string>; // obsolete

serial-update-method ( increment | unixtime );

server-addresses { ( <ipv4_address> | <ipv6_address> ) [

port <integer> ]; ... };

server-names { <quoted_string>; ... };

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | static-stub | hint | forward

| delegation-only | redirect );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name

| subdomain | wildcard | self | selfsub | selfwild |

krb5-self | ms-self | krb5-subdomain | ms-subdomain |

tcp-self | 6to4-self | zonesub | external ) [ <string>

] <rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <boolean>;

};

zone-statistics <boolean>;

};

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] { ( <masters> | <ipv4_address> [

port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key

<string> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ];

auto-dnssec ( allow | maintain | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dnssec-dnskey-kskonly <boolean>;

dnssec-loadkeys-interval <integer>;

dnssec-secure-to-insecure <boolean>;

dnssec-update-mode ( maintain | no-resign );

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

inline-signing <boolean>;

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw );

masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port

<integer> ] | <ipv6_address> [ port <integer> ] ) [ key

<string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer> <quoted_string>; // obsolete

serial-update-method ( increment | unixtime );

server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port

<integer> ]; ... };

server-names { <quoted_string>; ... };

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | static-stub | hint | forward |

delegation-only | redirect );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name |

subdomain | wildcard | self | selfsub | selfwild | krb5-self |

ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self

| zonesub | external ) [ <string> ] <rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <boolean>;

};