aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart PoetteringThis is a summary of the named.conf options supported by

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poetteringthis version of BIND 9.

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poetteringoptions {

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering avoid-v4-udp-ports { <port>; ... };

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering avoid-v6-udp-ports { <port>; ... };

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering blackhole { <address_match_element>; ... };

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering coresize <size>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering datasize <size>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering deallocate-on-exit <boolean>; // obsolete

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering directory <quoted_string>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering dump-file <quoted_string>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering fake-iquery <boolean>; // obsolete

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering files <size>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering has-old-clients <boolean>; // obsolete

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering heartbeat-interval <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering host-statistics <boolean>; // not implemented

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering host-statistics-max <integer>; // not implemented

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering hostname ( <quoted_string> | none );

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering interface-interval <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering listen-on [ port <integer> ] { <address_match_element>; ... };

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering listen-on-v6 [ port <integer> ] { <address_match_element>; ... };

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering match-mapped-addresses <boolean>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering memstatistics-file <quoted_string>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering multiple-cnames <boolean>; // obsolete

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering named-xfer <quoted_string>; // obsolete

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering pid-file ( <quoted_string> | none );

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering port <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering querylog <boolean>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering recursing-file <quoted_string>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering random-device <quoted_string>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering recursive-clients <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering serial-queries <integer>; // obsolete

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering serial-query-rate <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering server-id ( <quoted_string> | none |;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering stacksize <size>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering statistics-file <quoted_string>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering statistics-interval <integer>; // not yet implemented

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering tcp-clients <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering tcp-listen-queue <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering tkey-dhkey <quoted_string> <integer>;

98f91566cc7d43c6b86a711fa1d196ed5876b2f3Lennart Poettering tkey-gssapi-credential <quoted_string>;

98f91566cc7d43c6b86a711fa1d196ed5876b2f3Lennart Poettering tkey-domain <quoted_string>;

98f91566cc7d43c6b86a711fa1d196ed5876b2f3Lennart Poettering transfers-per-ns <integer>;

98f91566cc7d43c6b86a711fa1d196ed5876b2f3Lennart Poettering transfers-in <integer>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering transfers-out <integer>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering treat-cr-as-space <boolean>; // obsolete

0095c45415ad24338342369d76d5635088294eaeLennart Poettering use-id-pool <boolean>; // obsolete

0095c45415ad24338342369d76d5635088294eaeLennart Poettering use-ixfr <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering version ( <quoted_string> | none );

0095c45415ad24338342369d76d5635088294eaeLennart Poettering flush-zones-on-shutdown <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering allow-query-cache { <address_match_element>; ... };

0095c45415ad24338342369d76d5635088294eaeLennart Poettering allow-recursion { <address_match_element>; ... };

0095c45415ad24338342369d76d5635088294eaeLennart Poettering allow-v6-synthesis { <address_match_element>; ... }; // obsolete

0095c45415ad24338342369d76d5635088294eaeLennart Poettering sortlist { <address_match_element>; ... };

0095c45415ad24338342369d76d5635088294eaeLennart Poettering topology { <address_match_element>; ... }; // not implemented

0095c45415ad24338342369d76d5635088294eaeLennart Poettering auth-nxdomain <boolean>; // default changed

0095c45415ad24338342369d76d5635088294eaeLennart Poettering minimal-responses <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering recursion <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering rrset-order { [ class <string> ] [ type <string> ] [ name

0095c45415ad24338342369d76d5635088294eaeLennart Poettering <quoted_string> ] <string> <string>; ... };

0095c45415ad24338342369d76d5635088294eaeLennart Poettering provide-ixfr <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering request-ixfr <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering fetch-glue <boolean>; // obsolete

0095c45415ad24338342369d76d5635088294eaeLennart Poettering rfc2308-type1 <boolean>; // not yet implemented

0095c45415ad24338342369d76d5635088294eaeLennart Poettering additional-from-auth <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering additional-from-cache <boolean>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering query-source <querysource4>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering query-source-v6 <querysource6>;

0095c45415ad24338342369d76d5635088294eaeLennart Poettering cleaning-interval <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering min-roots <integer>; // not implemented

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering lame-ttl <integer>;

aacf3b483b70b9a9ff16217f6376d143cbfe4636Lennart Poettering max-ncache-ttl <integer>;

max-cache-ttl <integer>;

transfer-format ( many-answers | one-answer );

max-cache-size <size_no_default>;

check-names ( master | slave | response ) ( fail | warn | ignore );

cache-file <quoted_string>;

suppress-initial-notify <boolean>; // not yet implemented

preferred-glue <string>;

dual-stack-servers [ port <integer> ] { ( <quoted_string> [port

<integer>] | <ipv4_address> [port <integer>] | <ipv6_address> [port <integer>] ); ... };

edns-udp-size <integer>;

max-udp-size <integer>;

root-delegation-only [ exclude { <quoted_string>; ... } ];

disable-algorithms <string> { <string>; ... };

dnssec-enable <boolean>;

dnssec-lookaside <string> trust-anchor <string>;

dnssec-must-be-secure <string> <boolean>;

dnssec-accept-expired <boolean>;

ixfr-from-differences <ixfrdiff>;

use-additional-cache <boolean>;

acache-cleaning-interval <integer>;

max-acache-size <size_no_default>;

clients-per-query <integer>;

max-clients-per-query <integer>;

empty-server <string>;

empty-contact <string>;

empty-zones-enable <boolean>;

disable-empty-zone <string>;

zero-no-soa-ttl-cache <boolean>;

allow-query { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-notify { <address_match_element>; ... };

masterfile-format ( text | raw );

notify <notifytype>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>

) [ port <integer> ]; ... };

notify-delay <integer>;

dialup <dialuptype>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

maintain-ixfr-base <boolean>; // obsolete

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-retry-time <integer>;

min-retry-time <integer>;

max-refresh-time <integer>;

min-refresh-time <integer>;

multi-master <boolean>;

sig-validity-interval <integer>;

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ];

use-alt-transfer-source <boolean>;

zone-statistics <boolean>;

key-directory <quoted_string>;

check-wildcard <boolean>;

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-srv-cname ( fail | warn | ignore );

check-sibling <boolean>;

zero-no-soa-ttl <boolean>;

};

controls {

inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *

) ] allow { <address_match_element>; ... } [ keys { <string>; ... } ];

unix <quoted_string> perm <integer> owner <integer> group <integer>

[ keys { <string>; ... } ];

};

acl <string> { <address_match_element>; ... };

masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [port

<integer>] | <ipv6_address> [port <integer>] ) [ key <string> ]; ... };

logging {

channel <string> {

file <log_file>;

syslog <optional_facility>;

null;

stderr;

severity <log_severity>;

print-time <boolean>;

print-severity <boolean>;

print-category <boolean>;

};

category <string> { <string>; ... };

};

view <string> <optional_class> {

match-clients { <address_match_element>; ... };

match-destinations { <address_match_element>; ... };

match-recursive-only <boolean>;

key <string> {

algorithm <string>;

secret <string>;

};

zone <string> <optional_class> {

type ( master | slave | stub | hint | forward |

delegation-only );

file <quoted_string>;

journal <quoted_string>;

ixfr-base <quoted_string>; // obsolete

ixfr-tmp-file <quoted_string>; // obsolete

masters [ port <integer> ] { ( <masters> | <ipv4_address>

[port <integer>] | <ipv6_address> [port <integer>] ) [ key <string> ]; ... };

pubkey <integer> <integer> <integer> <quoted_string>; //

obsolete

update-policy { ( grant | deny ) <string> ( name |

subdomain | wildcard | self | selfsub | selfwild ) <string> <rrtypelist>; ... };

database <string>;

delegation-only <boolean>;

check-names ( fail | warn | ignore );

ixfr-from-differences <boolean>;

allow-query { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-notify { <address_match_element>; ... };

masterfile-format ( text | raw );

notify <notifytype>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ];

also-notify [ port <integer> ] { ( <ipv4_address> |

<ipv6_address> ) [ port <integer> ]; ... };

notify-delay <integer>;

dialup <dialuptype>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> |

<ipv6_address> ) [ port <integer> ]; ... };

maintain-ixfr-base <boolean>; // obsolete

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-retry-time <integer>;

min-retry-time <integer>;

max-refresh-time <integer>;

min-refresh-time <integer>;

multi-master <boolean>;

sig-validity-interval <integer>;

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

alt-transfer-source ( <ipv4_address> | * ) [ port (

<integer> | * ) ];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

use-alt-transfer-source <boolean>;

zone-statistics <boolean>;

key-directory <quoted_string>;

check-wildcard <boolean>;

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-srv-cname ( fail | warn | ignore );

check-sibling <boolean>;

zero-no-soa-ttl <boolean>;

};

dlz <string> {

database <string>;

};

server <netprefix> {

bogus <boolean>;

provide-ixfr <boolean>;

request-ixfr <boolean>;

support-ixfr <boolean>; // obsolete

transfers <integer>;

transfer-format ( many-answers | one-answer );

keys <server_key>;

edns <boolean>;

edns-udp-size <integer>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | *

) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>

| * ) ];

query-source <querysource4>;

query-source-v6 <querysource6>;

transfer-source ( <ipv4_address> | * ) [ port ( <integer> |

* ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port (

<integer> | * ) ];

};

trusted-keys { <string> <integer> <integer> <integer>

<quoted_string>; ... };

allow-query-cache { <address_match_element>; ... };

allow-recursion { <address_match_element>; ... };

allow-v6-synthesis { <address_match_element>; ... }; // obsolete

sortlist { <address_match_element>; ... };

topology { <address_match_element>; ... }; // not implemented

auth-nxdomain <boolean>; // default changed

minimal-responses <boolean>;

recursion <boolean>;

rrset-order { [ class <string> ] [ type <string> ] [ name

<quoted_string> ] <string> <string>; ... };

provide-ixfr <boolean>;

request-ixfr <boolean>;

fetch-glue <boolean>; // obsolete

rfc2308-type1 <boolean>; // not yet implemented

additional-from-auth <boolean>;

additional-from-cache <boolean>;

query-source <querysource4>;

query-source-v6 <querysource6>;

cleaning-interval <integer>;

min-roots <integer>; // not implemented

lame-ttl <integer>;

max-ncache-ttl <integer>;

max-cache-ttl <integer>;

transfer-format ( many-answers | one-answer );

max-cache-size <size_no_default>;

check-names ( master | slave | response ) ( fail | warn | ignore );

cache-file <quoted_string>;

suppress-initial-notify <boolean>; // not yet implemented

preferred-glue <string>;

dual-stack-servers [ port <integer> ] { ( <quoted_string> [port

<integer>] | <ipv4_address> [port <integer>] | <ipv6_address> [port <integer>] ); ... };

edns-udp-size <integer>;

max-udp-size <integer>;

root-delegation-only [ exclude { <quoted_string>; ... } ];

disable-algorithms <string> { <string>; ... };

dnssec-enable <boolean>;

dnssec-lookaside <string> trust-anchor <string>;

dnssec-must-be-secure <string> <boolean>;

dnssec-accept-expired <boolean>;

ixfr-from-differences <ixfrdiff>;

use-additional-cache <boolean>;

acache-cleaning-interval <integer>;

max-acache-size <size_no_default>;

clients-per-query <integer>;

max-clients-per-query <integer>;

empty-server <string>;

empty-contact <string>;

empty-zones-enable <boolean>;

disable-empty-zone <string>;

zero-no-soa-ttl-cache <boolean>;

allow-query { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-notify { <address_match_element>; ... };

masterfile-format ( text | raw );

notify <notifytype>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>

) [ port <integer> ]; ... };

notify-delay <integer>;

dialup <dialuptype>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

maintain-ixfr-base <boolean>; // obsolete

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-retry-time <integer>;

min-retry-time <integer>;

max-refresh-time <integer>;

min-refresh-time <integer>;

multi-master <boolean>;

sig-validity-interval <integer>;

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ];

use-alt-transfer-source <boolean>;

zone-statistics <boolean>;

key-directory <quoted_string>;

check-wildcard <boolean>;

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-srv-cname ( fail | warn | ignore );

check-sibling <boolean>;

zero-no-soa-ttl <boolean>;

database <string>;

};

lwres {

listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

view <string> <optional_class>;

search { <string>; ... };

ndots <integer>;

};

key <string> {

algorithm <string>;

secret <string>;

};

zone <string> <optional_class> {

type ( master | slave | stub | hint | forward | delegation-only );

file <quoted_string>;

journal <quoted_string>;

ixfr-base <quoted_string>; // obsolete

ixfr-tmp-file <quoted_string>; // obsolete

masters [ port <integer> ] { ( <masters> | <ipv4_address> [port

<integer>] | <ipv6_address> [port <integer>] ) [ key <string> ]; ... };

pubkey <integer> <integer> <integer> <quoted_string>; // obsolete

update-policy { ( grant | deny ) <string> ( name | subdomain |

wildcard | self | selfsub | selfwild ) <string> <rrtypelist>; ... };

database <string>;

delegation-only <boolean>;

check-names ( fail | warn | ignore );

ixfr-from-differences <boolean>;

allow-query { <address_match_element>; ... };

allow-transfer { <address_match_element>; ... };

allow-update { <address_match_element>; ... };

allow-update-forwarding { <address_match_element>; ... };

allow-notify { <address_match_element>; ... };

masterfile-format ( text | raw );

notify <notifytype>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>

) [ port <integer> ]; ... };

notify-delay <integer>;

dialup <dialuptype>;

forward ( first | only );

forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )

[ port <integer> ]; ... };

maintain-ixfr-base <boolean>; // obsolete

max-ixfr-log-size <size>; // obsolete

max-journal-size <size_no_default>;

max-transfer-time-in <integer>;

max-transfer-time-out <integer>;

max-transfer-idle-in <integer>;

max-transfer-idle-out <integer>;

max-retry-time <integer>;

min-retry-time <integer>;

max-refresh-time <integer>;

min-refresh-time <integer>;

multi-master <boolean>;

sig-validity-interval <integer>;

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )

];

alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |

* ) ];

use-alt-transfer-source <boolean>;

zone-statistics <boolean>;

key-directory <quoted_string>;

check-wildcard <boolean>;

check-integrity <boolean>;

check-mx ( fail | warn | ignore );

check-mx-cname ( fail | warn | ignore );

check-srv-cname ( fail | warn | ignore );

check-sibling <boolean>;

zero-no-soa-ttl <boolean>;

};

dlz <string> {

database <string>;

};

server <netprefix> {

bogus <boolean>;

provide-ixfr <boolean>;

request-ixfr <boolean>;

support-ixfr <boolean>; // obsolete

transfers <integer>;

transfer-format ( many-answers | one-answer );

keys <server_key>;

edns <boolean>;

edns-udp-size <integer>;

max-udp-size <integer>;

notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

query-source <querysource4>;

query-source-v6 <querysource6>;

transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];

transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];

};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };