1516N/A

39N/AThis is a summary of the named.conf options supported by

39N/Athis version of BIND 9.

39N/A

39N/Aacl <string> { <address_match_element>; ... };

39N/A

39N/Acontrols {

39N/A inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

39N/A ) ] allow { <address_match_element>; ... } [ keys { <string>;

39N/A ... } ];

39N/A unix <quoted_string> perm <integer> owner <integer> group <integer>

39N/A [ keys { <string>; ... } ];

39N/A};

39N/A

39N/Adlz <string> {

39N/A database <string>;

39N/A search <boolean>;

39N/A};

39N/A

39N/Akey <string> {

39N/A algorithm <string>;

926N/A secret <string>;

926N/A};

3312N/A

926N/Alogging {

39N/A category <string> { <string>; ... };

3339N/A channel <string> {

2453N/A file <quoted_string> [ versions ( "unlimited" | <integer> )

3194N/A ] [ size <size> ];

3194N/A null;

342N/A print-category <boolean>;

3041N/A print-severity <boolean>;

1516N/A print-time <boolean>;

1636N/A severity <log_severity>;

3041N/A stderr;

3234N/A syslog <optional_facility>;

1386N/A };

3234N/A};

2639N/A

3234N/Alwres {

39N/A listen-on [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

51N/A | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

2073N/A ndots <integer>;

2910N/A search { <string>; ... };

3110N/A view <string> <optional_class>;

2144N/A};

1066N/A

1231N/Amanaged-keys { <string> <string> <integer> <integer> <integer>

2453N/A <quoted_string>; ... };

1352N/A

1890N/Amasters <string> [ port <integer> ] [ dscp <integer> ] { ( <masters> |

296N/A <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] )

2876N/A [ key <string> ]; ... };

39N/A

3041N/Aoptions {

3041N/A acache-cleaning-interval <integer>;

3041N/A acache-enable <boolean>;

3041N/A additional-from-auth <boolean>;

3041N/A additional-from-cache <boolean>;

3041N/A allow-new-zones <boolean>;

3041N/A allow-notify { <address_match_element>; ... };

3041N/A allow-query { <address_match_element>; ... };

3041N/A allow-query-cache { <address_match_element>; ... };

3234N/A allow-query-cache-on { <address_match_element>; ... };

3041N/A allow-query-on { <address_match_element>; ... };

3041N/A allow-recursion { <address_match_element>; ... };

3041N/A allow-recursion-on { <address_match_element>; ... };

3041N/A allow-transfer { <address_match_element>; ... };

3041N/A allow-update { <address_match_element>; ... };

3041N/A allow-update-forwarding { <address_match_element>; ... };

3041N/A allow-v6-synthesis { <address_match_element>; ... }; // obsolete

3041N/A also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

3041N/A <ipv4_address> [ port <integer> ] | <ipv6_address> [ port

3041N/A <integer> ] ) [ key <string> ]; ... };

3041N/A alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

3041N/A ] [ dscp <integer> ];

3234N/A alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

3041N/A * ) ] [ dscp <integer> ];

3041N/A attach-cache <string>;

3041N/A auth-nxdomain <boolean>; // default changed

3041N/A auto-dnssec ( allow | maintain | off );

3041N/A automatic-interface-scan <boolean>;

3041N/A avoid-v4-udp-ports { <portrange>; ... };

3041N/A avoid-v6-udp-ports { <portrange>; ... };

3041N/A bindkeys-file <quoted_string>;

2690N/A blackhole { <address_match_element>; ... };

2690N/A cache-file <quoted_string>;

2690N/A check-dup-records ( fail | warn | ignore );

2690N/A check-integrity <boolean>;

2690N/A check-mx ( fail | warn | ignore );

2690N/A check-mx-cname ( fail | warn | ignore );

2690N/A check-names ( master | slave | response ) ( fail | warn | ignore );

2690N/A check-sibling <boolean>;

2690N/A check-spf ( warn | ignore );

2690N/A check-srv-cname ( fail | warn | ignore );

2690N/A check-wildcard <boolean>;

2690N/A cleaning-interval <integer>;

2690N/A clients-per-query <integer>;

2690N/A coresize <size>;

2690N/A datasize <size>;

2690N/A deallocate-on-exit <boolean>; // obsolete

2690N/A deny-answer-addresses { <address_match_element>; ... } [

2690N/A except-from { <quoted_string>; ... } ];

2690N/A deny-answer-aliases { <quoted_string>; ... } [ except-from {

2690N/A <quoted_string>; ... } ];

2690N/A dialup <dialuptype>;

2690N/A directory <quoted_string>;

2690N/A disable-algorithms <string> { <string>; ... };

2690N/A disable-ds-digests <string> { <string>; ... };

2690N/A disable-empty-zone <string>;

2690N/A dns64 <netprefix> {

2690N/A break-dnssec <boolean>;

2690N/A clients { <address_match_element>; ... };

2690N/A exclude { <address_match_element>; ... };

2690N/A mapped { <address_match_element>; ... };

2690N/A recursive-only <boolean>;

2690N/A suffix <ipv6_address>;

2690N/A };

2690N/A dns64-contact <string>;

2690N/A dns64-server <string>;

2690N/A dnssec-accept-expired <boolean>;

2690N/A dnssec-dnskey-kskonly <boolean>;

2690N/A dnssec-enable <boolean>;

1713N/A dnssec-loadkeys-interval <integer>;

39N/A dnssec-lookaside ( <string> trust-anchor <string> | auto | no );

39N/A dnssec-must-be-secure <string> <boolean>;

39N/A dnssec-secure-to-insecure <boolean>;

39N/A dnssec-update-mode ( maintain | no-resign );

39N/A dnssec-validation ( yes | no | auto );

205N/A dscp <integer>;

39N/A dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

205N/A <integer> ] [ dscp <integer> ] | <ipv4_address> [ port

39N/A <integer> ] [ dscp <integer> ] | <ipv6_address> [ port

39N/A <integer> ] [ dscp <integer> ] ); ... };

39N/A dump-file <quoted_string>;

39N/A edns-udp-size <integer>;

39N/A empty-contact <string>;

39N/A empty-server <string>;

39N/A empty-zones-enable <boolean>;

39N/A fake-iquery <boolean>; // obsolete

39N/A fetch-glue <boolean>; // obsolete

39N/A files <size>;

39N/A filter-aaaa { <address_match_element>; ... }; // not configured

39N/A filter-aaaa-on-v4 <filter_aaaa>; // not configured

39N/A filter-aaaa-on-v6 <filter_aaaa>; // not configured

39N/A flush-zones-on-shutdown <boolean>;

39N/A forward ( first | only );

39N/A forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

39N/A | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

39N/A geoip-directory ( <quoted_string> | none ); // not configured

39N/A has-old-clients <boolean>; // obsolete

39N/A heartbeat-interval <integer>;

39N/A host-statistics <boolean>; // not implemented

39N/A host-statistics-max <integer>; // not implemented

48N/A hostname ( <quoted_string> | none );

48N/A inline-signing <boolean>;

48N/A interface-interval <integer>;

48N/A ixfr-from-differences <ixfrdiff>;

48N/A key-directory <quoted_string>;

59N/A lame-ttl <integer>;

48N/A listen-on [ port <integer> ] [ dscp <integer> ] {

2073N/A <address_match_element>; ... };

2073N/A listen-on-v6 [ port <integer> ] [ dscp <integer> ] {

39N/A <address_match_element>; ... };

2639N/A maintain-ixfr-base <boolean>; // obsolete

2910N/A managed-keys-directory <quoted_string>;

39N/A masterfile-format ( text | raw | map );

567N/A match-mapped-addresses <boolean>;

838N/A max-acache-size <size_no_default>;

1890N/A max-cache-size <size_no_default>;

2608N/A max-cache-ttl <integer>;

3110N/A max-clients-per-query <integer>;

3110N/A max-ixfr-log-size <size>; // obsolete

3110N/A max-journal-size <size_no_default>;

3110N/A max-ncache-ttl <integer>;

3110N/A max-refresh-time <integer>;

3110N/A max-retry-time <integer>;

39N/A max-rsa-exponent-size <integer>;

39N/A max-transfer-idle-in <integer>;

39N/A max-transfer-idle-out <integer>;

1431N/A max-transfer-time-in <integer>;

3158N/A max-transfer-time-out <integer>;

39N/A max-udp-size <integer>;

227N/A max-zone-ttl <maxttl_no_default>;

3158N/A memstatistics <boolean>;

315N/A memstatistics-file <quoted_string>;

39N/A min-refresh-time <integer>;

1352N/A min-retry-time <integer>;

1352N/A min-roots <integer>; // not implemented

1352N/A minimal-responses <boolean>;

1352N/A multi-master <boolean>;

1431N/A multiple-cnames <boolean>; // obsolete

3158N/A named-xfer <quoted_string>; // obsolete

429N/A no-case-compress { <address_match_element>; ... };

315N/A nosit-udp-size <integer>; // not configured

3158N/A notify <notifytype>;

429N/A notify-delay <integer>;

1352N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

1352N/A dscp <integer> ];

39N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

926N/A [ dscp <integer> ];

926N/A notify-to-soa <boolean>;

203N/A nsec3-test-zone <boolean>; // test only

203N/A pid-file ( <quoted_string> | none );

203N/A port <integer>;

203N/A preferred-glue <string>;

1045N/A prefetch <integer> [ <integer> ];

1045N/A provide-ixfr <boolean>;

72N/A query-source <querysource4>;

72N/A query-source-v6 <querysource6>;

59N/A querylog <boolean>;

2054N/A queryport-pool-ports <integer>; // obsolete

1045N/A queryport-pool-updateinterval <integer>; // obsolete

1045N/A random-device <quoted_string>;

1045N/A rate-limit {

1045N/A all-per-second <integer>;

1713N/A errors-per-second <integer>;

3041N/A exempt-clients { <address_match_element>; ... };

3041N/A ipv4-prefix-length <integer>;

1045N/A ipv6-prefix-length <integer>;

2084N/A log-only <boolean>;

2084N/A max-table-size <integer>;

2639N/A min-table-size <integer>;

2084N/A nodata-per-second <integer>;

2854N/A nxdomains-per-second <integer>;

2084N/A qps-scale <integer>;

2842N/A referrals-per-second <integer>;

2842N/A responses-per-second <integer>;

2842N/A slip <integer>;

2842N/A window <integer>;

3041N/A };

2842N/A recursing-file <quoted_string>;

2842N/A recursion <boolean>;

2842N/A recursive-clients <integer>;

2854N/A request-ixfr <boolean>;

2854N/A request-ixfr <boolean>;

2842N/A request-nsid <boolean>;

2842N/A request-sit <boolean>; // not configured

2842N/A reserved-sockets <integer>;

2842N/A resolver-query-timeout <integer>;

2842N/A response-policy { zone <quoted_string> [ policy ( given | disabled

2842N/A | passthru | no-op | drop | tcp-only | nxdomain | nodata |

2842N/A cname <quoted_string> ) ] [ recursive-only <boolean> ] [

2842N/A max-policy-ttl <integer> ]; ... } [ recursive-only <boolean> ]

2842N/A [ break-dnssec <boolean> ] [ max-policy-ttl <integer> ] [

2842N/A min-ns-dots <integer> ] [ qname-wait-recurse <boolean> ];

59N/A rfc2308-type1 <boolean>; // not yet implemented

3234N/A root-delegation-only [ exclude { <quoted_string>; ... } ];

3234N/A rrset-order { [ class <string> ] [ type <string> ] [ name

59N/A <quoted_string> ] <string> <string>; ... };

72N/A secroots-file <quoted_string>;

72N/A serial-queries <integer>; // obsolete

72N/A serial-query-rate <integer>;

72N/A serial-update-method ( increment | unixtime );

72N/A server-id ( <quoted_string> | none | hostname );

2144N/A session-keyalg <string>;

72N/A session-keyfile ( <quoted_string> | none );

59N/A session-keyname <string>;

72N/A sig-signing-nodes <integer>;

72N/A sig-signing-signatures <integer>;

72N/A sig-signing-type <integer>;

72N/A sig-validity-interval <integer> [ <integer> ];

59N/A sit-secret <string>; // not configured

72N/A sortlist { <address_match_element>; ... };

2639N/A stacksize <size>;

2639N/A statistics-file <quoted_string>;

2639N/A statistics-interval <integer>; // not yet implemented

2639N/A suppress-initial-notify <boolean>; // not yet implemented

2639N/A tcp-clients <integer>;

59N/A tcp-listen-queue <integer>;

1713N/A tkey-dhkey <quoted_string> <integer>;

59N/A tkey-domain <quoted_string>;

838N/A tkey-gssapi-credential <quoted_string>;

2240N/A tkey-gssapi-keytab <quoted_string>;

838N/A topology { <address_match_element>; ... }; // not implemented

838N/A transfer-format ( many-answers | one-answer );

838N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

926N/A dscp <integer> ];

838N/A transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

838N/A ] [ dscp <integer> ];

2240N/A transfers-in <integer>;

2240N/A transfers-out <integer>;

2284N/A transfers-per-ns <integer>;

2240N/A treat-cr-as-space <boolean>; // obsolete

838N/A try-tcp-refresh <boolean>;

2240N/A update-check-ksk <boolean>;

2240N/A use-alt-transfer-source <boolean>;

2240N/A use-id-pool <boolean>; // obsolete

2240N/A use-ixfr <boolean>;

2240N/A use-queryport-pool <boolean>; // obsolete

2240N/A use-v4-udp-ports { <portrange>; ... };

2240N/A use-v6-udp-ports { <portrange>; ... };

2240N/A version ( <quoted_string> | none );

2240N/A zero-no-soa-ttl <boolean>;

2317N/A zero-no-soa-ttl-cache <boolean>;

3212N/A zone-statistics <zonestat>;

3212N/A};

3212N/A

3212N/Aserver <netprefix> {

3212N/A bogus <boolean>;

3212N/A edns <boolean>;

3212N/A edns-udp-size <integer>;

3212N/A keys <server_key>;

2240N/A max-udp-size <integer>;

3158N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

2240N/A dscp <integer> ];

2240N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

3212N/A [ dscp <integer> ];

2240N/A provide-ixfr <boolean>;

2240N/A query-source <querysource4>;

2240N/A query-source-v6 <querysource6>;

2240N/A request-ixfr <boolean>;

2240N/A request-nsid <boolean>;

2240N/A request-sit <boolean>; // not configured

2240N/A support-ixfr <boolean>; // obsolete

2284N/A transfer-format ( many-answers | one-answer );

2284N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

2284N/A dscp <integer> ];

2284N/A transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

2240N/A ] [ dscp <integer> ];

2240N/A transfers <integer>;

2284N/A};

2284N/A

2284N/Astatistics-channels {

838N/A inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

838N/A ) ] [ allow { <address_match_element>; ... } ];

838N/A};

838N/A

838N/Atrusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

838N/A

838N/Aview <string> <optional_class> {

926N/A acache-cleaning-interval <integer>;

838N/A acache-enable <boolean>;

838N/A additional-from-auth <boolean>;

838N/A additional-from-cache <boolean>;

838N/A allow-new-zones <boolean>;

838N/A allow-notify { <address_match_element>; ... };

838N/A allow-query { <address_match_element>; ... };

838N/A allow-query-cache { <address_match_element>; ... };

845N/A allow-query-cache-on { <address_match_element>; ... };

845N/A allow-query-on { <address_match_element>; ... };

926N/A allow-recursion { <address_match_element>; ... };

838N/A allow-recursion-on { <address_match_element>; ... };

845N/A allow-transfer { <address_match_element>; ... };

845N/A allow-update { <address_match_element>; ... };

845N/A allow-update-forwarding { <address_match_element>; ... };

838N/A allow-v6-synthesis { <address_match_element>; ... }; // obsolete

845N/A also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

845N/A <ipv4_address> [ port <integer> ] | <ipv6_address> [ port

838N/A <integer> ] ) [ key <string> ]; ... };

926N/A alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

203N/A ] [ dscp <integer> ];

315N/A alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

838N/A * ) ] [ dscp <integer> ];

203N/A attach-cache <string>;

838N/A auth-nxdomain <boolean>; // default changed

48N/A auto-dnssec ( allow | maintain | off );

48N/A cache-file <quoted_string>;

48N/A check-dup-records ( fail | warn | ignore );

48N/A check-integrity <boolean>;

48N/A check-mx ( fail | warn | ignore );

838N/A check-mx-cname ( fail | warn | ignore );

203N/A check-names ( master | slave | response ) ( fail | warn | ignore );

48N/A check-sibling <boolean>;

203N/A check-spf ( warn | ignore );

72N/A check-srv-cname ( fail | warn | ignore );

3158N/A check-wildcard <boolean>;

72N/A cleaning-interval <integer>;

3158N/A clients-per-query <integer>;

46N/A database <string>;

3158N/A deny-answer-addresses { <address_match_element>; ... } [

237N/A except-from { <quoted_string>; ... } ];

46N/A deny-answer-aliases { <quoted_string>; ... } [ except-from {

2453N/A <quoted_string>; ... } ];

2453N/A dialup <dialuptype>;

2453N/A disable-algorithms <string> { <string>; ... };

2453N/A disable-ds-digests <string> { <string>; ... };

2339N/A disable-empty-zone <string>;

2453N/A dlz <string> {

2453N/A database <string>;

2453N/A search <boolean>;

2453N/A };

2453N/A dns64 <netprefix> {

2339N/A break-dnssec <boolean>;

2339N/A clients { <address_match_element>; ... };

2876N/A exclude { <address_match_element>; ... };

2876N/A mapped { <address_match_element>; ... };

2339N/A recursive-only <boolean>;

2453N/A suffix <ipv6_address>;

2453N/A };

2453N/A dns64-contact <string>;

2453N/A dns64-server <string>;

2453N/A dnssec-accept-expired <boolean>;

2453N/A dnssec-dnskey-kskonly <boolean>;

2453N/A dnssec-enable <boolean>;

2453N/A dnssec-loadkeys-interval <integer>;

2453N/A dnssec-lookaside ( <string> trust-anchor <string> | auto | no );

2453N/A dnssec-must-be-secure <string> <boolean>;

2453N/A dnssec-secure-to-insecure <boolean>;

2453N/A dnssec-update-mode ( maintain | no-resign );

2339N/A dnssec-validation ( yes | no | auto );

2453N/A dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

3234N/A <integer> ] [ dscp <integer> ] | <ipv4_address> [ port

2453N/A <integer> ] [ dscp <integer> ] | <ipv6_address> [ port

2453N/A <integer> ] [ dscp <integer> ] ); ... };

2453N/A edns-udp-size <integer>;

2453N/A empty-contact <string>;

2453N/A empty-server <string>;

2453N/A empty-zones-enable <boolean>;

2453N/A fetch-glue <boolean>; // obsolete

3158N/A filter-aaaa { <address_match_element>; ... }; // not configured

2453N/A filter-aaaa-on-v4 <filter_aaaa>; // not configured

2453N/A filter-aaaa-on-v6 <filter_aaaa>; // not configured

3234N/A forward ( first | only );

2453N/A forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

2453N/A | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

2453N/A inline-signing <boolean>;

2453N/A ixfr-from-differences <ixfrdiff>;

3234N/A key <string> {

2453N/A algorithm <string>;

2453N/A secret <string>;

2453N/A };

2453N/A key-directory <quoted_string>;

2910N/A lame-ttl <integer>;

2910N/A maintain-ixfr-base <boolean>; // obsolete

2910N/A managed-keys { <string> <string> <integer> <integer> <integer>

2910N/A <quoted_string>; ... };

2910N/A masterfile-format ( text | raw | map );

2910N/A match-clients { <address_match_element>; ... };

2910N/A match-destinations { <address_match_element>; ... };

2910N/A match-recursive-only <boolean>;

2910N/A max-acache-size <size_no_default>;

2910N/A max-cache-size <size_no_default>;

2910N/A max-cache-ttl <integer>;

2910N/A max-clients-per-query <integer>;

2910N/A max-ixfr-log-size <size>; // obsolete

2910N/A max-journal-size <size_no_default>;

2910N/A max-ncache-ttl <integer>;

2910N/A max-refresh-time <integer>;

2910N/A max-retry-time <integer>;

2910N/A max-transfer-idle-in <integer>;

2910N/A max-transfer-idle-out <integer>;

2910N/A max-transfer-time-in <integer>;

2910N/A max-transfer-time-out <integer>;

2910N/A max-udp-size <integer>;

2910N/A max-zone-ttl <maxttl_no_default>;

2910N/A min-refresh-time <integer>;

2910N/A min-retry-time <integer>;

2910N/A min-roots <integer>; // not implemented

2910N/A minimal-responses <boolean>;

2910N/A multi-master <boolean>;

2910N/A no-case-compress { <address_match_element>; ... };

2910N/A nosit-udp-size <integer>; // not configured

2910N/A notify <notifytype>;

2910N/A notify-delay <integer>;

2910N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

2910N/A dscp <integer> ];

2910N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

2910N/A [ dscp <integer> ];

2910N/A notify-to-soa <boolean>;

2910N/A nsec3-test-zone <boolean>; // test only

2910N/A preferred-glue <string>;

2910N/A prefetch <integer> [ <integer> ];

3234N/A provide-ixfr <boolean>;

2910N/A query-source <querysource4>;

2910N/A query-source-v6 <querysource6>;

2910N/A queryport-pool-ports <integer>; // obsolete

2910N/A queryport-pool-updateinterval <integer>; // obsolete

2910N/A rate-limit {

2910N/A all-per-second <integer>;

2910N/A errors-per-second <integer>;

2910N/A exempt-clients { <address_match_element>; ... };

2910N/A ipv4-prefix-length <integer>;

2910N/A ipv6-prefix-length <integer>;

2910N/A log-only <boolean>;

2910N/A max-table-size <integer>;

2910N/A min-table-size <integer>;

2910N/A nodata-per-second <integer>;

2910N/A nxdomains-per-second <integer>;

2910N/A qps-scale <integer>;

2910N/A referrals-per-second <integer>;

2910N/A responses-per-second <integer>;

2910N/A slip <integer>;

2910N/A window <integer>;

2910N/A };

2910N/A recursion <boolean>;

2910N/A request-ixfr <boolean>;

2910N/A request-ixfr <boolean>;

2910N/A request-nsid <boolean>;

2910N/A request-sit <boolean>; // not configured

2910N/A resolver-query-timeout <integer>;

2910N/A response-policy { zone <quoted_string> [ policy ( given | disabled

2910N/A | passthru | no-op | drop | tcp-only | nxdomain | nodata |

2910N/A cname <quoted_string> ) ] [ recursive-only <boolean> ] [

3158N/A max-policy-ttl <integer> ]; ... } [ recursive-only <boolean> ]

3158N/A [ break-dnssec <boolean> ] [ max-policy-ttl <integer> ] [

3158N/A min-ns-dots <integer> ] [ qname-wait-recurse <boolean> ];

2910N/A rfc2308-type1 <boolean>; // not yet implemented

2910N/A root-delegation-only [ exclude { <quoted_string>; ... } ];

2910N/A rrset-order { [ class <string> ] [ type <string> ] [ name

2910N/A <quoted_string> ] <string> <string>; ... };

2910N/A search <boolean>;

2910N/A serial-update-method ( increment | unixtime );

2910N/A server <netprefix> {

2910N/A bogus <boolean>;

3158N/A edns <boolean>;

3158N/A edns-udp-size <integer>;

2910N/A keys <server_key>;

2910N/A max-udp-size <integer>;

2910N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

2910N/A ) ] [ dscp <integer> ];

2910N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

2910N/A | * ) ] [ dscp <integer> ];

2910N/A provide-ixfr <boolean>;

3339N/A query-source <querysource4>;

2910N/A query-source-v6 <querysource6>;

2910N/A request-ixfr <boolean>;

2910N/A request-nsid <boolean>;

2910N/A request-sit <boolean>; // not configured

2910N/A support-ixfr <boolean>; // obsolete

2910N/A transfer-format ( many-answers | one-answer );

2910N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

2910N/A * ) ] [ dscp <integer> ];

2910N/A transfer-source-v6 ( <ipv6_address> | * ) [ port (

2910N/A <integer> | * ) ] [ dscp <integer> ];

2910N/A transfers <integer>;

2910N/A };

2910N/A sig-signing-nodes <integer>;

2910N/A sig-signing-signatures <integer>;

2910N/A sig-signing-type <integer>;

2910N/A sig-validity-interval <integer> [ <integer> ];

2910N/A sortlist { <address_match_element>; ... };

2910N/A suppress-initial-notify <boolean>; // not yet implemented

2910N/A topology { <address_match_element>; ... }; // not implemented

2910N/A transfer-format ( many-answers | one-answer );

2910N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

2910N/A dscp <integer> ];

2910N/A transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

2910N/A ] [ dscp <integer> ];

2910N/A trusted-keys { <string> <integer> <integer> <integer>

2910N/A <quoted_string>; ... };

2910N/A try-tcp-refresh <boolean>;

2910N/A update-check-ksk <boolean>;

2910N/A use-alt-transfer-source <boolean>;

2910N/A use-queryport-pool <boolean>; // obsolete

2910N/A zero-no-soa-ttl <boolean>;

2910N/A zero-no-soa-ttl-cache <boolean>;

2910N/A zone <string> <optional_class> {

2910N/A allow-notify { <address_match_element>; ... };

2910N/A allow-query { <address_match_element>; ... };

2910N/A allow-query-on { <address_match_element>; ... };

2910N/A allow-transfer { <address_match_element>; ... };

2910N/A allow-update { <address_match_element>; ... };

2910N/A allow-update-forwarding { <address_match_element>; ... };

2910N/A also-notify [ port <integer> ] [ dscp <integer> ] { (

2910N/A <masters> | <ipv4_address> [ port <integer> ] |

2910N/A <ipv6_address> [ port <integer> ] ) [ key <string> ];

2910N/A ... };

2910N/A alt-transfer-source ( <ipv4_address> | * ) [ port (

2910N/A <integer> | * ) ] [ dscp <integer> ];

2910N/A alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (

2910N/A <integer> | * ) ] [ dscp <integer> ];

2910N/A auto-dnssec ( allow | maintain | off );

2910N/A check-dup-records ( fail | warn | ignore );

2910N/A check-integrity <boolean>;

2910N/A check-mx ( fail | warn | ignore );

2910N/A check-mx-cname ( fail | warn | ignore );

2910N/A check-names ( fail | warn | ignore );

2910N/A check-sibling <boolean>;

3234N/A check-spf ( warn | ignore );

2910N/A check-srv-cname ( fail | warn | ignore );

2910N/A check-wildcard <boolean>;

2910N/A database <string>;

2910N/A delegation-only <boolean>;

2910N/A dialup <dialuptype>;

2910N/A dlz <string>;

2910N/A dnssec-dnskey-kskonly <boolean>;

2910N/A dnssec-loadkeys-interval <integer>;

2910N/A dnssec-secure-to-insecure <boolean>;

3339N/A dnssec-update-mode ( maintain | no-resign );

3339N/A file <quoted_string>;

2910N/A forward ( first | only );

2910N/A forwarders [ port <integer> ] [ dscp <integer> ] { (

2910N/A <ipv4_address> | <ipv6_address> ) [ port <integer> ] [

2910N/A dscp <integer> ]; ... };

2910N/A in-view <string>;

2910N/A inline-signing <boolean>;

2910N/A ixfr-base <quoted_string>; // obsolete

2910N/A ixfr-from-differences <boolean>;

2910N/A ixfr-tmp-file <quoted_string>; // obsolete

2910N/A journal <quoted_string>;

2910N/A key-directory <quoted_string>;

2910N/A maintain-ixfr-base <boolean>; // obsolete

2910N/A masterfile-format ( text | raw | map );

2910N/A masters [ port <integer> ] [ dscp <integer> ] { ( <masters>

2910N/A | <ipv4_address> [ port <integer> ] | <ipv6_address> [

2910N/A port <integer> ] ) [ key <string> ]; ... };

2910N/A max-ixfr-log-size <size>; // obsolete

2910N/A max-journal-size <size_no_default>;

2910N/A max-refresh-time <integer>;

2910N/A max-retry-time <integer>;

2910N/A max-transfer-idle-in <integer>;

2910N/A max-transfer-idle-out <integer>;

2910N/A max-transfer-time-in <integer>;

2910N/A max-transfer-time-out <integer>;

3158N/A max-zone-ttl <maxttl_no_default>;

3158N/A min-refresh-time <integer>;

2910N/A min-retry-time <integer>;

2910N/A multi-master <boolean>;

2910N/A notify <notifytype>;

2910N/A notify-delay <integer>;

3234N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

2910N/A ) ] [ dscp <integer> ];

2910N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

2910N/A | * ) ] [ dscp <integer> ];

2910N/A notify-to-soa <boolean>;

2910N/A nsec3-test-zone <boolean>; // test only

2910N/A pubkey <integer> <integer> <integer>

2910N/A <quoted_string>; // obsolete

3339N/A request-ixfr <boolean>;

3339N/A serial-update-method ( increment | unixtime );

2910N/A server-addresses { ( <ipv4_address> | <ipv6_address> ) [

2910N/A port <integer> ]; ... };

2910N/A server-names { <quoted_string>; ... };

2910N/A sig-signing-nodes <integer>;

2910N/A sig-signing-signatures <integer>;

2910N/A sig-signing-type <integer>;

3158N/A sig-validity-interval <integer> [ <integer> ];

2910N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

2910N/A * ) ] [ dscp <integer> ];

2910N/A transfer-source-v6 ( <ipv6_address> | * ) [ port (

2910N/A <integer> | * ) ] [ dscp <integer> ];

2910N/A try-tcp-refresh <boolean>;

3158N/A type ( master | slave | stub | static-stub | hint | forward

2910N/A | delegation-only | redirect );

2910N/A update-check-ksk <boolean>;

2910N/A update-policy ( local | { ( grant | deny ) <string> ( name

2910N/A | subdomain | wildcard | self | selfsub | selfwild |

2910N/A krb5-self | ms-self | krb5-subdomain | ms-subdomain |

2910N/A tcp-self | 6to4-self | zonesub | external ) [ <string>

2910N/A ] <rrtypelist>; ... };

2910N/A use-alt-transfer-source <boolean>;

2910N/A zero-no-soa-ttl <boolean>;

2910N/A zone-statistics <zonestat>;

2910N/A };

2910N/A zone-statistics <zonestat>;

2910N/A};

2910N/A

2910N/Azone <string> <optional_class> {

2910N/A allow-notify { <address_match_element>; ... };

2910N/A allow-query { <address_match_element>; ... };

2910N/A allow-query-on { <address_match_element>; ... };

2910N/A allow-transfer { <address_match_element>; ... };

2910N/A allow-update { <address_match_element>; ... };

2910N/A allow-update-forwarding { <address_match_element>; ... };

2910N/A also-notify [ port <integer> ] [ dscp <integer> ] { ( <masters> |

2910N/A <ipv4_address> [ port <integer> ] | <ipv6_address> [ port

2910N/A <integer> ] ) [ key <string> ]; ... };

2910N/A alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

2910N/A ] [ dscp <integer> ];

2910N/A alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

3339N/A * ) ] [ dscp <integer> ];

3158N/A auto-dnssec ( allow | maintain | off );

3339N/A check-dup-records ( fail | warn | ignore );

2910N/A check-integrity <boolean>;

2910N/A check-mx ( fail | warn | ignore );

2910N/A check-mx-cname ( fail | warn | ignore );

2910N/A check-names ( fail | warn | ignore );

3158N/A check-sibling <boolean>;

3158N/A check-spf ( warn | ignore );

3158N/A check-srv-cname ( fail | warn | ignore );

2910N/A check-wildcard <boolean>;

2910N/A database <string>;

2910N/A delegation-only <boolean>;

3158N/A dialup <dialuptype>;

2910N/A dlz <string>;

2910N/A dnssec-dnskey-kskonly <boolean>;

2910N/A dnssec-loadkeys-interval <integer>;

3158N/A dnssec-secure-to-insecure <boolean>;

3158N/A dnssec-update-mode ( maintain | no-resign );

3158N/A file <quoted_string>;

2910N/A forward ( first | only );

2453N/A forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address>

2453N/A | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... };

2453N/A in-view <string>;

2453N/A inline-signing <boolean>;

2453N/A ixfr-base <quoted_string>; // obsolete

2453N/A ixfr-from-differences <boolean>;

2910N/A ixfr-tmp-file <quoted_string>; // obsolete

2339N/A journal <quoted_string>;

2339N/A key-directory <quoted_string>;

2339N/A maintain-ixfr-base <boolean>; // obsolete

2339N/A masterfile-format ( text | raw | map );

2453N/A masters [ port <integer> ] [ dscp <integer> ] { ( <masters> |

2453N/A <ipv4_address> [ port <integer> ] | <ipv6_address> [ port

2453N/A <integer> ] ) [ key <string> ]; ... };

2453N/A max-ixfr-log-size <size>; // obsolete

2453N/A max-journal-size <size_no_default>;

2339N/A max-refresh-time <integer>;

2453N/A max-retry-time <integer>;

2453N/A max-transfer-idle-in <integer>;

2453N/A max-transfer-idle-out <integer>;

2453N/A max-transfer-time-in <integer>;

2339N/A max-transfer-time-out <integer>;

2453N/A max-zone-ttl <maxttl_no_default>;

2453N/A min-refresh-time <integer>;

2453N/A min-retry-time <integer>;

2453N/A multi-master <boolean>;

2453N/A notify <notifytype>;

2339N/A notify-delay <integer>;

2339N/A notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

2339N/A dscp <integer> ];

2339N/A notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ]

2339N/A [ dscp <integer> ];

2608N/A notify-to-soa <boolean>;

2608N/A nsec3-test-zone <boolean>; // test only

2608N/A pubkey <integer> <integer> <integer> <quoted_string>; // obsolete

2339N/A request-ixfr <boolean>;

2453N/A serial-update-method ( increment | unixtime );

2453N/A server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port

2339N/A <integer> ]; ... };

2453N/A server-names { <quoted_string>; ... };

2639N/A sig-signing-nodes <integer>;

2540N/A sig-signing-signatures <integer>;

2339N/A sig-signing-type <integer>;

2339N/A sig-validity-interval <integer> [ <integer> ];

2339N/A transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [

2339N/A dscp <integer> ];

2339N/A transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * )

3110N/A ] [ dscp <integer> ];

3110N/A try-tcp-refresh <boolean>;

2339N/A type ( master | slave | stub | static-stub | hint | forward |

2339N/A delegation-only | redirect );

2339N/A update-check-ksk <boolean>;

2339N/A update-policy ( local | { ( grant | deny ) <string> ( name |

2910N/A subdomain | wildcard | self | selfsub | selfwild | krb5-self |

2910N/A ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self

2910N/A | zonesub | external ) [ <string> ] <rrtypelist>; ... };

2910N/A use-alt-transfer-source <boolean>;

2910N/A zero-no-soa-ttl <boolean>;

2910N/A zone-statistics <zonestat>;

2910N/A};

2910N/A

2910N/A