1cf118a656f5fd210787908b845362077fc507f8Evan HuntCopyright (C) 2000 Internet Software Consortium.

1cf118a656f5fd210787908b845362077fc507f8Evan HuntSee COPYRIGHT in the source root or http://www.isc.org/copyright for terms.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt$Id: options,v 1.32 2000/08/01 01:22:02 tale Exp $

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan HuntThis is a summary of the implementation status of the various named.conf

1cf118a656f5fd210787908b845362077fc507f8Evan Huntoptions in BIND 9.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan HuntLegend:

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt Yes Implemented in this release.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt No Not implemented, may be implemented in a later release.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt Obsolete Obsolete, not applicable to BIND 9, or just evil.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt Will not be implemented.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt * New in BIND 9.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt + The option is now always enabled.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt - The option is now always disabled.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt % The default value has changed since BIND 8.

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt @ Semantics of certain pathological address match lists, in

1cf118a656f5fd210787908b845362077fc507f8Evan Hunt particular those involving double negation, have changed.

The new semantics are generally safer. IPv6 addresses

are supported, but the predefined ACLs "localhost" and

"localnets" match IPv4 addresses only.

# BIND 9 accepts both LF and CRLF as end-of-line markers.

options {

[ version version_string; ] Yes

[ directory path_name; ] Yes

[ named-xfer path_name; ] Obsolete

[ dump-file path_name; ] No

[ memstatistics-file path_name; ] No

[ pid-file path_name; ] Yes

[ statistics-file path_name; ] No

[ auth-nxdomain yes_or_no; ] Yes%

[ deallocate-on-exit yes_or_no; ] Obsolete+

[ dialup yes_or_no; ] No

[ fake-iquery yes_or_no; ] Obsolete-

[ fetch-glue yes_or_no; ] No

[ has-old-clients yes_or_no; ] Obsolete

[ host-statistics yes_or_no; ] No

[ multiple-cnames yes_or_no; ] Obsolete-

[ notify yes_or_no; ] Yes

[ recursion yes_or_no; ] Yes

[ rfc2308-type1 yes_or_no; ] No

[ use-id-pool yes_or_no; ] Obsolete+

[ treat-cr-as-space yes_or_no; ] Obsolete#

[ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes

[ forward ( only | first ); ] Yes

[ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ] Yes

[ check-names ... ] No

[ allow-query { address_match_list }; ] Yes@

[ allow-transfer { address_match_list }; ] Yes@

[ allow-recursion { address_match_list }; ] Yes@

[ blackhole { address_match_list }; ] No

[ listen-on [ port ip_port ] { address_match_list }; ] Yes@

[ listen-on-v6 [ port ip_port ] { address_match_list }; ] Yes*

[ query-source ... ] Yes

[ query-source-v6 ... ] Yes*

[ lame-ttl number; ] No

[ max-transfer-time-in number; ] Yes

[ max-transfer-idle-in number; ] Yes*

[ max-transfer-time-out number; ] Yes*

[ max-transfer-idle-out number; ] Yes*

[ max-cache-ttl number; ] Yes*

[ max-ncache-ttl number; ] Yes

[ max-cache-size size_spec; ] No*

[ min-roots number; ] No

[ serial-queries number; ] No

[ transfer-format ( one-answer | many-answers ); ] Yes

[ transfers-in number; ] Yes

[ transfers-out number; ] Yes

[ transfers-per-ns number; ] Yes

[ transfer-source ip_addr; ] Yes

[ transfer-source-v6 ip_addr; ] Yes*

[ request-ixfr yes_or_no; ] Yes*

[ provide-ixfr yes_or_no; ] Yes*

[ maintain-ixfr-base yes_or_no; ] Obsolete

[ max-ixfr-log-size number; ] No

[ coresize size_spec ; ] No

[ datasize size_spec ; ] No

[ files size_spec ; ] No

[ stacksize size_spec ; ] No

[ cleaning-interval number; ] Yes

[ heartbeat-interval number; ] No

[ interface-interval number; ] Yes

[ statistics-interval number; ] No

[ topology { address_match_list }; ] No

[ sortlist { address_match_list }; ] No

[ rrset-order { order_spec ; [ order_spec ; ... ] }; ] No

[ recursive-clients number; ] Yes*

[ tcp-clients number; ] Yes*

[ tkey-domain ... ] Yes*

[ tkey-dhkey ... ] Yes*

[ port number; ] Yes*

};

acl Yes@

include Yes

key Yes

logging Yes

controls {

[ inet ... ] Yes%

[ unix ... ] Obsolete

};

server ip_addr {

[ bogus yes_or_no; ] No

[ request-ixfr yes_or_no; ] Yes*

[ provide-ixfr yes_or_no; ] Yes*

[ support-ixfr yes_or_no; ] Obsolete

[ transfers number; ] Yes

[ transfer-format ( one-answer | many-answers ); ] Yes

[ keys { key_id [key_id ... ] }; ] Yes

};

trusted-keys Yes

zone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

type master; Yes

file path_name; Yes

[ forward ( only | first ); ] No

[ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] No

[ check-names ( warn | fail | ignore ); ] No

[ allow-update { address_match_list }; ] Yes@

[ allow-query { address_match_list }; ] Yes@

[ allow-transfer { address_match_list }; ] Yes@

[ dialup yes_or_no; ] No

[ max-transfer-time-out number; ] Yes*

[ max-transfer-idle-out number; ] Yes*

[ notify yes_or_no; ] Yes

[ also-notify { ip_addr; [ ip_addr; ... ] }; Yes

[ ixfr-base path_name; ] Obsolete

[ pubkey number number number string; ] No

};

zone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

type stub; No

};

zone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

type slave; Yes

[ file path_name; ] Yes

[ ixfr-base path_name; ] Obsolete

masters [ port ip_port ] { ip_addr; [ ip_addr; ... ] }; Yes

[ forward ( only | first ); ] No

[ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] No

[ check-names ( warn | fail | ignore ); ] No

[ allow-update { address_match_list }; ] Obsolete

[ allow-update-forwarding { address_match_list }; ] No*

[ allow-query { address_match_list }; ] Yes@

[ allow-transfer { address_match_list }; ] Yes@

[ transfer-source ip_addr; ] Yes

[ transfer-source-v6 ip_addr; ] Yes*

[ dialup yes_or_no; ] No

[ max-transfer-time-in number; ] Yes

[ max-transfer-idle-in number; ] Yes*

[ max-transfer-time-out number; ] Yes*

[ max-transfer-idle-out number; ] Yes*

[ notify yes_or_no; ] Yes

[ also-notify { ip_addr; [ ip_addr; ... ] }; Yes

[ pubkey number number number string; ] No

};

zone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

type forward; No

};

zone "." [ ( in | hs | hesiod | chaos ) ] {

type hint; Yes

file path_name; Yes

[ check-names ( warn | fail | ignore ); ] No

};

view "view_name" [ ( in | hs | hesiod | chaos ) ] { Yes*

match-clients { address_match_list }; Yes*

[ zone ... ] Yes

[ auth-nxdomain yes_or_no; ] Yes

[ fetch-glue yes_or_no; ] No

[ notify yes_or_no; ] Yes

[ recursion yes_or_no; ] Yes

[ rfc2308-type1 yes_or_no; ] No

[ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes

[ forward ( only | first ); ] Yes

[ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ] Yes

[ check-names ... ] No

[ allow-query { address_match_list }; ] Yes

[ allow-transfer { address_match_list }; ] Yes

[ allow-recursion { address_match_list }; ] Yes

[ query-source ... ] Yes

[ query-source-v6 ... ] Yes

[ lame-ttl number; ] No

[ max-transfer-time-out number; ] Yes*

[ max-transfer-idle-out number; ] Yes*

[ max-cache-ttl number; ] Yes*

[ max-ncache-ttl number; ] Yes

[ max-cache-size size_spec; ] No*

[ min-roots number; ] No

[ transfer-format ( one-answer | many-answers ); ] Yes

[ transfer-source ip_addr; ] Yes

[ transfer-source-v6 ip_addr; ] Yes*

[ request-ixfr yes_or_no; ] Yes*

[ provide-ixfr yes_or_no;] Yes*

[ cleaning-interval number; ] Yes

[ topology { address_match_list }; ] No

[ sortlist { address_match_list }; ] No

[ rrset-order { order_spec ; [ order_spec ; ... ] }; ] No

[ key ... ] Yes

[ server ... ] Yes

[ trusted-keys ... ] Yes

};