Import bind 9.5.2 vendor sources.
[dragonfly.git] / contrib / bind-9.5.2 / bin / named / named.conf.html
1 <!--
2  - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
3  - 
4  - Permission to use, copy, modify, and/or distribute this software for any
5  - purpose with or without fee is hereby granted, provided that the above
6  - copyright notice and this permission notice appear in all copies.
7  - 
8  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
10  - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
12  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14  - PERFORMANCE OF THIS SOFTWARE.
15 -->
16 <!-- $Id: named.conf.html,v 1.40.38.2 2009/07/11 01:43:29 tbox Exp $ -->
17 <html>
18 <head>
19 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
20 <title>named.conf</title>
21 <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
22 </head>
23 <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
24 <a name="id2476275"></a><div class="titlepage"></div>
25 <div class="refnamediv">
26 <h2>Name</h2>
27 <p><code class="filename">named.conf</code> &#8212; configuration file for named</p>
28 </div>
29 <div class="refsynopsisdiv">
30 <h2>Synopsis</h2>
31 <div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
32 </div>
33 <div class="refsect1" lang="en">
34 <a name="id2543342"></a><h2>DESCRIPTION</h2>
35 <p><code class="filename">named.conf</code> is the configuration file
36       for
37       <span><strong class="command">named</strong></span>.  Statements are enclosed
38       in braces and terminated with a semi-colon.  Clauses in
39       the statements are also semi-colon terminated.  The usual
40       comment styles are supported:
41     </p>
42 <p>
43       C style: /* */
44     </p>
45 <p>
46       C++ style: // to end of line
47     </p>
48 <p>
49       Unix style: # to end of line
50     </p>
51 </div>
52 <div class="refsect1" lang="en">
53 <a name="id2543370"></a><h2>ACL</h2>
54 <div class="literallayout"><p><br>
55 acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
56 <br>
57 </p></div>
58 </div>
59 <div class="refsect1" lang="en">
60 <a name="id2543386"></a><h2>KEY</h2>
61 <div class="literallayout"><p><br>
62 key <em class="replaceable"><code>domain_name</code></em> {<br>
63         algorithm <em class="replaceable"><code>string</code></em>;<br>
64         secret <em class="replaceable"><code>string</code></em>;<br>
65 };<br>
66 </p></div>
67 </div>
68 <div class="refsect1" lang="en">
69 <a name="id2543405"></a><h2>MASTERS</h2>
70 <div class="literallayout"><p><br>
71 masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
72         ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
73         <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
74 };<br>
75 </p></div>
76 </div>
77 <div class="refsect1" lang="en">
78 <a name="id2543451"></a><h2>SERVER</h2>
79 <div class="literallayout"><p><br>
80 server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
81         bogus <em class="replaceable"><code>boolean</code></em>;<br>
82         edns <em class="replaceable"><code>boolean</code></em>;<br>
83         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
84         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
85         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
86         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
87         keys <em class="replaceable"><code>server_key</code></em>;<br>
88         transfers <em class="replaceable"><code>integer</code></em>;<br>
89         transfer-format ( many-answers | one-answer );<br>
90         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
91                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
92         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
93                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
94 <br>
95         support-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
96 };<br>
97 </p></div>
98 </div>
99 <div class="refsect1" lang="en">
100 <a name="id2543520"></a><h2>TRUSTED-KEYS</h2>
101 <div class="literallayout"><p><br>
102 trusted-keys {<br>
103         <em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
104 };<br>
105 </p></div>
106 </div>
107 <div class="refsect1" lang="en">
108 <a name="id2543545"></a><h2>CONTROLS</h2>
109 <div class="literallayout"><p><br>
110 controls {<br>
111         inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
112                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
113                 allow { <em class="replaceable"><code>address_match_element</code></em>; ... }<br>
114                 [<span class="optional"> keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
115         unix <em class="replaceable"><code>unsupported</code></em>; // not implemented<br>
116 };<br>
117 </p></div>
118 </div>
119 <div class="refsect1" lang="en">
120 <a name="id2543580"></a><h2>LOGGING</h2>
121 <div class="literallayout"><p><br>
122 logging {<br>
123         channel <em class="replaceable"><code>string</code></em> {<br>
124                 file <em class="replaceable"><code>log_file</code></em>;<br>
125                 syslog <em class="replaceable"><code>optional_facility</code></em>;<br>
126                 null;<br>
127                 stderr;<br>
128                 severity <em class="replaceable"><code>log_severity</code></em>;<br>
129                 print-time <em class="replaceable"><code>boolean</code></em>;<br>
130                 print-severity <em class="replaceable"><code>boolean</code></em>;<br>
131                 print-category <em class="replaceable"><code>boolean</code></em>;<br>
132         };<br>
133         category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
134 };<br>
135 </p></div>
136 </div>
137 <div class="refsect1" lang="en">
138 <a name="id2543619"></a><h2>LWRES</h2>
139 <div class="literallayout"><p><br>
140 lwres {<br>
141         listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
142                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
143         };<br>
144         view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em>;<br>
145         search { <em class="replaceable"><code>string</code></em>; ... };<br>
146         ndots <em class="replaceable"><code>integer</code></em>;<br>
147 };<br>
148 </p></div>
149 </div>
150 <div class="refsect1" lang="en">
151 <a name="id2543660"></a><h2>OPTIONS</h2>
152 <div class="literallayout"><p><br>
153 options {<br>
154         avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
155         avoid-v6-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
156         blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
157         coresize <em class="replaceable"><code>size</code></em>;<br>
158         datasize <em class="replaceable"><code>size</code></em>;<br>
159         directory <em class="replaceable"><code>quoted_string</code></em>;<br>
160         dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
161         files <em class="replaceable"><code>size</code></em>;<br>
162         heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
163         host-statistics <em class="replaceable"><code>boolean</code></em>; // not implemented<br>
164         host-statistics-max <em class="replaceable"><code>number</code></em>; // not implemented<br>
165         hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
166         interface-interval <em class="replaceable"><code>integer</code></em>;<br>
167         listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
168         listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
169         match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
170         memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
171         pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
172         port <em class="replaceable"><code>integer</code></em>;<br>
173         querylog <em class="replaceable"><code>boolean</code></em>;<br>
174         recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
175         reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
176         random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
177         recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
178         serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
179         server-id ( <em class="replaceable"><code>quoted_string</code></em> | none |;<br>
180         stacksize <em class="replaceable"><code>size</code></em>;<br>
181         statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
182         statistics-interval <em class="replaceable"><code>integer</code></em>; // not yet implemented<br>
183         tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
184         tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
185         tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
186         tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
187         tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
188         transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
189         transfers-in <em class="replaceable"><code>integer</code></em>;<br>
190         transfers-out <em class="replaceable"><code>integer</code></em>;<br>
191         use-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
192         version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
193         allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
194         allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
195         sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
196         topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
197         auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
198         minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
199         recursion <em class="replaceable"><code>boolean</code></em>;<br>
200         rrset-order {<br>
201                 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
202                 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
203         };<br>
204         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
205         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
206         rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
207         additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
208         additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
209         query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
210         query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
211         use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
212         queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
213         queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
214         cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
215         min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
216         lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
217         max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
218         max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
219         transfer-format ( many-answers | one-answer );<br>
220         max-cache-size <em class="replaceable"><code>size</code></em>;<br>
221         max-acache-size <em class="replaceable"><code>size</code></em>;<br>
222         clients-per-query <em class="replaceable"><code>number</code></em>;<br>
223         max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
224         check-names ( master | slave | response )<br>
225                 ( fail | warn | ignore );<br>
226         check-mx ( fail | warn | ignore );<br>
227         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
228         check-mx-cname ( fail | warn | ignore );<br>
229         check-srv-cname ( fail | warn | ignore );<br>
230         cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
231         suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
232         preferred-glue <em class="replaceable"><code>string</code></em>;<br>
233         dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
234                 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
235                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
236                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
237         };<br>
238         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
239         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
240         root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
241         disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
242         dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
243         dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
244         dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
245         dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
246         dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
247 <br>
248         empty-server <em class="replaceable"><code>string</code></em>;<br>
249         empty-contact <em class="replaceable"><code>string</code></em>;<br>
250         empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
251         disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
252 <br>
253         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
254         ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
255 <br>
256         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
257         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
258         allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
259         allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
260         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
261         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
262         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
263         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
264 <br>
265         masterfile-format ( text | raw );<br>
266         notify <em class="replaceable"><code>notifytype</code></em>;<br>
267         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
268         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
269         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
270         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
271         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
272                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
273         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
274 <br>
275         forward ( first | only );<br>
276         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
277                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
278         };<br>
279 <br>
280         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
281         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
282         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
283         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
284         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
285         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
286         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
287         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
288         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
289         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
290         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
291 <br>
292         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
293                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
294         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
295                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
296 <br>
297         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
298                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
299         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
300                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
301         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
302 <br>
303         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
304         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
305         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
306         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
307         zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
308 <br>
309         allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
310         deallocate-on-exit <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
311         fake-iquery <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
312         fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
313         has-old-clients <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
314         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
315         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
316         multiple-cnames <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
317         named-xfer <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
318         serial-queries <em class="replaceable"><code>integer</code></em>; // obsolete<br>
319         treat-cr-as-space <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
320         use-id-pool <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
321 };<br>
322 </p></div>
323 </div>
324 <div class="refsect1" lang="en">
325 <a name="id2544435"></a><h2>VIEW</h2>
326 <div class="literallayout"><p><br>
327 view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
328         match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
329         match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
330         match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
331 <br>
332         key <em class="replaceable"><code>string</code></em> {<br>
333                 algorithm <em class="replaceable"><code>string</code></em>;<br>
334                 secret <em class="replaceable"><code>string</code></em>;<br>
335         };<br>
336 <br>
337         zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
338                 ...<br>
339         };<br>
340 <br>
341         server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
342                 ...<br>
343         };<br>
344 <br>
345         trusted-keys {<br>
346                 <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ...<br>
347         };<br>
348 <br>
349         allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
350         allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
351         sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
352         topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
353         auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
354         minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
355         recursion <em class="replaceable"><code>boolean</code></em>;<br>
356         rrset-order {<br>
357                 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
358                 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
359         };<br>
360         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
361         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
362         rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
363         additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
364         additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
365         query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
366         query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
367         use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
368         queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
369         queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
370         cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
371         min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
372         lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
373         max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
374         max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
375         transfer-format ( many-answers | one-answer );<br>
376         max-cache-size <em class="replaceable"><code>size</code></em>;<br>
377         max-acache-size <em class="replaceable"><code>size</code></em>;<br>
378         clients-per-query <em class="replaceable"><code>number</code></em>;<br>
379         max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
380         check-names ( master | slave | response )<br>
381                 ( fail | warn | ignore );<br>
382         check-mx ( fail | warn | ignore );<br>
383         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
384         check-mx-cname ( fail | warn | ignore );<br>
385         check-srv-cname ( fail | warn | ignore );<br>
386         cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
387         suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
388         preferred-glue <em class="replaceable"><code>string</code></em>;<br>
389         dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
390                 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
391                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
392                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
393         };<br>
394         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
395         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
396         root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
397         disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
398         dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
399         dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
400         dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
401         dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
402         dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
403 <br>
404         empty-server <em class="replaceable"><code>string</code></em>;<br>
405         empty-contact <em class="replaceable"><code>string</code></em>;<br>
406         empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
407         disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
408 <br>
409         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
410         ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
411 <br>
412         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
413         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
414         allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
415         allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
416         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
417         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
418         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
419         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
420 <br>
421         masterfile-format ( text | raw );<br>
422         notify <em class="replaceable"><code>notifytype</code></em>;<br>
423         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
424         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
425         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
426         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
427         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
428                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
429         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
430 <br>
431         forward ( first | only );<br>
432         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
433                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
434         };<br>
435 <br>
436         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
437         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
438         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
439         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
440         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
441         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
442         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
443         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
444         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
445         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
446         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
447 <br>
448         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
449                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
450         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
451                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
452 <br>
453         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
454                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
455         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
456                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
457         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
458 <br>
459         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
460         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
461         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
462         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
463         zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
464 <br>
465         allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
466         fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
467         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
468         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
469 };<br>
470 </p></div>
471 </div>
472 <div class="refsect1" lang="en">
473 <a name="id2545096"></a><h2>ZONE</h2>
474 <div class="literallayout"><p><br>
475 zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
476         type ( master | slave | stub | hint |<br>
477                 forward | delegation-only );<br>
478         file <em class="replaceable"><code>quoted_string</code></em>;<br>
479 <br>
480         masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
481                 ( <em class="replaceable"><code>masters</code></em> |<br>
482                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
483                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
484         };<br>
485 <br>
486         database <em class="replaceable"><code>string</code></em>;<br>
487         delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
488         check-names ( fail | warn | ignore );<br>
489         check-mx ( fail | warn | ignore );<br>
490         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
491         check-mx-cname ( fail | warn | ignore );<br>
492         check-srv-cname ( fail | warn | ignore );<br>
493         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
494         ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
495         journal <em class="replaceable"><code>quoted_string</code></em>;<br>
496         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
497 <br>
498         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
499         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
500         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
501         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
502         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
503         update-policy {<br>
504                 ( grant | deny ) <em class="replaceable"><code>string</code></em><br>
505                 ( name | subdomain | wildcard | self ) <em class="replaceable"><code>string</code></em><br>
506                 <em class="replaceable"><code>rrtypelist</code></em>; ...<br>
507         };<br>
508         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
509 <br>
510         masterfile-format ( text | raw );<br>
511         notify <em class="replaceable"><code>notifytype</code></em>;<br>
512         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
513         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
514         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
515         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
516         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
517                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
518         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
519 <br>
520         forward ( first | only );<br>
521         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
522                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
523         };<br>
524 <br>
525         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
526         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
527         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
528         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
529         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
530         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
531         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
532         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
533         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
534         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
535         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
536 <br>
537         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
538                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
539         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
540                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
541 <br>
542         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
543                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
544         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
545                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
546         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
547 <br>
548         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
549         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
550         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
551 <br>
552         ixfr-base <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
553         ixfr-tmp-file <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
554         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
555         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
556         pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
557 };<br>
558 </p></div>
559 </div>
560 <div class="refsect1" lang="en">
561 <a name="id2545390"></a><h2>FILES</h2>
562 <p><code class="filename">/etc/named.conf</code>
563     </p>
564 </div>
565 <div class="refsect1" lang="en">
566 <a name="id2545402"></a><h2>SEE ALSO</h2>
567 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
568       <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
569       <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
570       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
571     </p>
572 </div>
573 </div></body>
574 </html>