d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic UpdaterThis is a summary of the named.conf options supported by

71cef386fae61275b03e203825680b39fedaa8c6Tinderbox Userthis version of BIND 9.

bef75d63d74f58abc0f834ed271526672777ba29Automatic Updater

5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox Useracl <string> { <address_match_element>; ... };

5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User

5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox Usercontrols {

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews ) ] allow { <address_match_element>; ... } [ keys { <string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater ... } ];

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater unix <quoted_string> perm <integer> owner <integer> group <integer>

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater [ keys { <string>; ... } ];

fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User};

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt

cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox Userdlz <string> {

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt database <string>;

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User};

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updaterkey <string> {

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater algorithm <string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater secret <string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater};

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updaterlogging {

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt category <string> { <string>; ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater channel <string> {

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User file <quoted_string> [ versions ( "unlimited" | <integer> )

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater ] [ size <size> ];

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater null;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater print-category <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater print-severity <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater print-time <boolean>;

fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User severity <log_severity>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater stderr;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User syslog <optional_facility>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User};

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Userlwres {

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater [ port <integer> ]; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User ndots <integer>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User search { <string>; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User view <string> <optional_class>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User};

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Usermanaged-keys { <string> <string> <integer> <integer> <integer>

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <quoted_string>; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Usermasters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Useroptions {

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User acache-cleaning-interval <integer>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User acache-enable <boolean>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User additional-from-auth <boolean>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User additional-from-cache <boolean>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User allow-notify { <address_match_element>; ... };

7e71f05d8643aca84914437c900cb716444507e4Tinderbox User allow-query { <address_match_element>; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User allow-query-cache { <address_match_element>; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User allow-query-cache-on { <address_match_element>; ... };

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt allow-query-on { <address_match_element>; ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater allow-recursion { <address_match_element>; ... };

9d557856c2a19ec95ee73245f60a92f8675cf5baTinderbox User allow-recursion-on { <address_match_element>; ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater allow-transfer { <address_match_element>; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User allow-update { <address_match_element>; ... };

9d557856c2a19ec95ee73245f60a92f8675cf5baTinderbox User allow-update-forwarding { <address_match_element>; ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater allow-v6-synthesis { <address_match_element>; ... }; // obsolete

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater ) [ port <integer> ]; ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater * ) ];

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater attach-cache <string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater auth-nxdomain <boolean>; // default changed

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater avoid-v4-udp-ports { <portrange>; ... };

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User avoid-v6-udp-ports { <portrange>; ... };

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt bindkeys-file <quoted_string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater blackhole { <address_match_element>; ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater cache-file <quoted_string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater check-dup-records ( fail | warn | ignore );

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater check-integrity <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater check-mx ( fail | warn | ignore );

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User check-mx-cname ( fail | warn | ignore );

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User check-names ( master | slave | response ) ( fail | warn | ignore );

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User check-sibling <boolean>;

7e71f05d8643aca84914437c900cb716444507e4Tinderbox User check-srv-cname ( fail | warn | ignore );

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User check-wildcard <boolean>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User cleaning-interval <integer>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User clients-per-query <integer>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User coresize <size>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User datasize <size>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User deallocate-on-exit <boolean>; // obsolete

f9ecaf8a4a4050fff73ba9939098edf4591aef75Tinderbox User deny-answer-addresses { <address_match_element>; ... } [

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User except-from { <quoted_string>; ... } ];

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater deny-answer-aliases { <quoted_string>; ... } [ except-from {

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <quoted_string>; ... } ];

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User dialup <dialuptype>;

7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User directory <quoted_string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater disable-algorithms <string> { <string>; ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater disable-empty-zone <string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater dnssec-accept-expired <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater dnssec-dnskey-kskonly <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater dnssec-enable <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater dnssec-lookaside <string> trust-anchor <string>;

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt dnssec-must-be-secure <string> <boolean>;

cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User dnssec-secure-to-insecure <boolean>;

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User dnssec-validation <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <integer> ] | <ipv4_address> [ port <integer> ] |

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <ipv6_address> [ port <integer> ] ); ... };

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater dump-file <quoted_string>;

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt edns-udp-size <integer>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater empty-contact <string>;

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User empty-server <string>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater empty-zones-enable <boolean>;

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater fake-iquery <boolean>; // obsolete

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater fetch-glue <boolean>; // obsolete

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater files <size>;

c313914d0e66b20969215e519bbf2ab4ecf39512Tinderbox User filter-aaaa { <address_match_element>; ... }; // not configured

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater filter-aaaa-on-v4 <v4_aaaa>; // not configured

fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater flush-zones-on-shutdown <boolean>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

has-old-clients <boolean>; // obsolete

heartbeat-interval <integer>;

host-statistics <boolean>; // not implemented

host-statistics-max <integer>; // not implemented

hostname ( <quoted_string> | none );

interface-interval <integer>;

ixfr-from-differences <ixfrdiff>;

key-directory <quoted_string>;

lame-ttl <integer>;

listen-on [ port <integer> ] { <address_match_element>; ... };

listen-on-v6 [ port <integer> ] { <address_match_element>; ... };

maintain-ixfr-base <boolean>; // obsolete

managed-keys-directory <quoted_string>;

masterfile-format ( text | raw );

match-mapped-addresses <boolean>;

max-acache-size <size_no_default>;

max-cache-size <size_no_default>;

max-cache-ttl <integer>;

max-clients-per-query <integer>;

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-ncache-ttl <integer>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-udp-size <integer>;

memstatistics <boolean>;

memstatistics-file <quoted_string>;

min-refresh-time <integer>;

min-retry-time <integer>;

min-roots <integer>; // not implemented

minimal-responses <boolean>;

multi-master <boolean>;

multiple-cnames <boolean>; // obsolete

named-xfer <quoted_string>; // obsolete

new-zone-file ( <quoted_string> | none );

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pid-file ( <quoted_string> | none );

port <integer>;

preferred-glue <string>;

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

querylog <boolean>;

queryport-pool-ports <integer>; // obsolete

queryport-pool-updateinterval <integer>; // obsolete

random-device <quoted_string>;

recursing-file <quoted_string>;

recursion <boolean>;

recursive-clients <integer>;

request-ixfr <boolean>;

request-nsid <boolean>;

reserved-sockets <integer>;

rfc2308-type1 <boolean>; // not yet implemented

root-delegation-only [ exclude { <quoted_string>; ... } ];

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

secroots-file <quoted_string>;

serial-queries <integer>; // obsolete

serial-query-rate <integer>;

server-id ( <quoted_string> | none | hostname );

session-keyalg <string>;

session-keyfile ( <quoted_string> | none );

session-keyname <string>;

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

sortlist { <address_match_element>; ... };

stacksize <size>;

statistics-file <quoted_string>;

statistics-interval <integer>; // not yet implemented

suppress-initial-notify <boolean>; // not yet implemented

tcp-clients <integer>;

tcp-listen-queue <integer>;

tkey-dhkey <quoted_string> <integer>;

tkey-domain <quoted_string>;

tkey-gssapi-credential <quoted_string>;

topology { <address_match_element>; ... }; // not implemented

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

transfers-in <integer>;

transfers-out <integer>;

transfers-per-ns <integer>;

treat-cr-as-space <boolean>; // obsolete

try-tcp-refresh <boolean>;

update-check-ksk <boolean>;

use-alt-transfer-source <boolean>;

use-id-pool <boolean>; // obsolete

use-ixfr <boolean>;

use-queryport-pool <boolean>; // obsolete

use-v4-udp-ports { <portrange>; ... };

use-v6-udp-ports { <portrange>; ... };

version ( <quoted_string> | none );

zero-no-soa-ttl <boolean>;

zero-no-soa-ttl-cache <boolean>;

zone-statistics <boolean>;

};

server <netprefix> {

bogus <boolean>;

edns <boolean>;

edns-udp-size <integer>;

keys <server_key>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

request-ixfr <boolean>;

support-ixfr <boolean>; // obsolete

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

transfers <integer>;

};

statistics-channels {

inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

) ] [ allow { <address_match_element>; ... } ];

};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

view <string> <optional_class> {

acache-cleaning-interval <integer>;

acache-enable <boolean>;

additional-from-auth <boolean>;

additional-from-cache <boolean>;

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-cache { <address_match_element>; ... };

allow-query-cache-on { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-recursion { <address_match_element>; ... };

allow-recursion-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-v6-synthesis { <address_match_element>; ... }; // obsolete

also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>

) [ port <integer> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ];

attach-cache <string>;

auth-nxdomain <boolean>; // default changed

cache-file <quoted_string>;

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( master | slave | response ) ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

cleaning-interval <integer>;

clients-per-query <integer>;

database <string>;

deny-answer-addresses { <address_match_element>; ... } [

except-from { <quoted_string>; ... } ];

deny-answer-aliases { <quoted_string>; ... } [ except-from {

<quoted_string>; ... } ];

dialup <dialuptype>;

disable-algorithms <string> { <string>; ... };

disable-empty-zone <string>;

dlz <string> {

database <string>;

};

dnssec-accept-expired <boolean>;

dnssec-dnskey-kskonly <boolean>;

dnssec-enable <boolean>;

dnssec-lookaside <string> trust-anchor <string>;

dnssec-must-be-secure <string> <boolean>;

dnssec-secure-to-insecure <boolean>;

dnssec-validation <boolean>;

dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port

<integer> ] | <ipv4_address> [ port <integer> ] |

<ipv6_address> [ port <integer> ] ); ... };

edns-udp-size <integer>;

empty-contact <string>;

empty-server <string>;

empty-zones-enable <boolean>;

fetch-glue <boolean>; // obsolete

filter-aaaa { <address_match_element>; ... }; // not configured

filter-aaaa-on-v4 <v4_aaaa>; // not configured

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

ixfr-from-differences <ixfrdiff>;

key <string> {

algorithm <string>;

secret <string>;

};

key-directory <quoted_string>;

lame-ttl <integer>;

maintain-ixfr-base <boolean>; // obsolete

managed-keys { <string> <string> <integer> <integer> <integer>

<quoted_string>; ... };

masterfile-format ( text | raw );

match-clients { <address_match_element>; ... };

match-destinations { <address_match_element>; ... };

match-recursive-only <boolean>;

max-acache-size <size_no_default>;

max-cache-size <size_no_default>;

max-cache-ttl <integer>;

max-clients-per-query <integer>;

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-ncache-ttl <integer>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-udp-size <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

min-roots <integer>; // not implemented

minimal-responses <boolean>;

multi-master <boolean>;

new-zone-file ( <quoted_string> | none );

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

preferred-glue <string>;

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

queryport-pool-ports <integer>; // obsolete

queryport-pool-updateinterval <integer>; // obsolete

recursion <boolean>;

request-ixfr <boolean>;

request-nsid <boolean>;

rfc2308-type1 <boolean>; // not yet implemented

root-delegation-only [ exclude { <quoted_string>; ... } ];

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

server <netprefix> {

bogus <boolean>;

edns <boolean>;

edns-udp-size <integer>;

keys <server_key>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ];

provide-ixfr <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

request-ixfr <boolean>;

support-ixfr <boolean>; // obsolete

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

transfers <integer>;

};

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

sortlist { <address_match_element>; ... };

suppress-initial-notify <boolean>; // not yet implemented

topology { <address_match_element>; ... }; // not implemented

transfer-format ( many-answers | one-answer );

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

trusted-keys { <string> <integer> <integer> <integer>

<quoted_string>; ... };

try-tcp-refresh <boolean>;

update-check-ksk <boolean>;

use-alt-transfer-source <boolean>;

use-queryport-pool <boolean>; // obsolete

zero-no-soa-ttl <boolean>;

zero-no-soa-ttl-cache <boolean>;

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] { ( <ipv4_address> |

<ipv6_address> ) [ port <integer> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port (

<integer> | * ) ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

auto-dnssec ( allow | maintain | create | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dnssec-dnskey-kskonly <boolean>;

dnssec-secure-to-insecure <boolean>;

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> |

<ipv6_address> ) [ port <integer> ]; ... };

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw );

masters [ port <integer> ] { ( <masters> | <ipv4_address> [

port <integer> ] | <ipv6_address> [ port <integer> ] )

[ key <string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer>

<quoted_string>; // obsolete

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | hint | forward |

delegation-only );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name

| subdomain | wildcard | self | selfsub | selfwild |

krb5-self | ms-self | krb5-subdomain | ms-subdomain |

tcp-self | 6to4-self | zonesub ) [ <string> ]

<rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <boolean>;

};

zone-statistics <boolean>;

};

zone <string> <optional_class> {

allow-notify { <address_match_element>; ... };

allow-query { <address_match_element>; ... };

allow-query-on { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>

) [ port <integer> ]; ... };

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ];

auto-dnssec ( allow | maintain | create | off );

check-dup-records ( fail | warn | ignore );

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-names ( fail | warn | ignore );

check-sibling <boolean>;

check-srv-cname ( fail | warn | ignore );

check-wildcard <boolean>;

database <string>;

delegation-only <boolean>;

dialup <dialuptype>;

dnssec-dnskey-kskonly <boolean>;

dnssec-secure-to-insecure <boolean>;

file <quoted_string>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

ixfr-base <quoted_string>; // obsolete

ixfr-from-differences <boolean>;

ixfr-tmp-file <quoted_string>; // obsolete

journal <quoted_string>;

key-directory <quoted_string>;

maintain-ixfr-base <boolean>; // obsolete

masterfile-format ( text | raw );

masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port

<integer> ] | <ipv6_address> [ port <integer> ] ) [ key

<string> ]; ... };

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-refresh-time <integer>;

max-retry-time <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

min-refresh-time <integer>;

min-retry-time <integer>;

multi-master <boolean>;

notify <notifytype>;

notify-delay <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

notify-to-soa <boolean>;

nsec3-test-zone <boolean>; // test only

pubkey <integer> <integer> <integer> <quoted_string>; // obsolete

sig-signing-nodes <integer>;

sig-signing-signatures <integer>;

sig-signing-type <integer>;

sig-validity-interval <integer> [ <integer> ];

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

try-tcp-refresh <boolean>;

type ( master | slave | stub | hint | forward | delegation-only );

update-check-ksk <boolean>;

update-policy ( local | { ( grant | deny ) <string> ( name |

subdomain | wildcard | self | selfsub | selfwild | krb5-self |

ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self

| zonesub ) [ <string> ] <rrtypelist>; ... };

use-alt-transfer-source <boolean>;

zero-no-soa-ttl <boolean>;

zone-statistics <boolean>;

};