2 - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
4 - Permission to use, copy, modify, and distribute this software for any
5 - purpose with or without fee is hereby granted, provided that the above
6 - copyright notice and this permission notice appear in all copies.
8 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
10 - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
12 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14 - PERFORMANCE OF THIS SOFTWARE.
16 <!-- $Id: named.conf.html,v 1.1.4.15 2006/09/13 02:56:21 marka Exp $ -->
19 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
20 <title>named.conf</title>
21 <meta name="generator" content="DocBook XSL Stylesheets V1.70.1">
23 <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
24 <a name="id2482688"></a><div class="titlepage"></div>
25 <div class="refnamediv">
27 <p><code class="filename">named.conf</code> — configuration file for named</p>
29 <div class="refsynopsisdiv">
31 <div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
33 <div class="refsect1" lang="en">
34 <a name="id2549388"></a><h2>DESCRIPTION</h2>
36 <code class="filename">named.conf</code> is the configuration file for
37 <span><strong class="command">named</strong></span>. Statements are enclosed
38 in braces and terminated with a semi-colon. Clauses in
39 the statements are also semi-colon terminated. The usual
40 comment styles are supported:
46 C++ style: // to end of line
49 Unix style: # to end of line
52 <div class="refsect1" lang="en">
53 <a name="id2549417"></a><h2>ACL</h2>
54 <div class="literallayout"><p><br>
55 acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
59 <div class="refsect1" lang="en">
60 <a name="id2549433"></a><h2>KEY</h2>
61 <div class="literallayout"><p><br>
62 key <em class="replaceable"><code>domain_name</code></em> {<br>
63 algorithm <em class="replaceable"><code>string</code></em>;<br>
64 secret <em class="replaceable"><code>string</code></em>;<br>
68 <div class="refsect1" lang="en">
69 <a name="id2549452"></a><h2>MASTERS</h2>
70 <div class="literallayout"><p><br>
71 masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
72 ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
73 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
77 <div class="refsect1" lang="en">
78 <a name="id2549498"></a><h2>SERVER</h2>
79 <div class="literallayout"><p><br>
80 server ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) {<br>
81 bogus <em class="replaceable"><code>boolean</code></em>;<br>
82 edns <em class="replaceable"><code>boolean</code></em>;<br>
83 provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
84 request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
85 keys <em class="replaceable"><code>server_key</code></em>;<br>
86 transfers <em class="replaceable"><code>integer</code></em>;<br>
87 transfer-format ( many-answers | one-answer );<br>
88 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
89 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
90 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
91 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
93 support-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
97 <div class="refsect1" lang="en">
98 <a name="id2549556"></a><h2>TRUSTED-KEYS</h2>
99 <div class="literallayout"><p><br>
101 <em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
105 <div class="refsect1" lang="en">
106 <a name="id2549581"></a><h2>CONTROLS</h2>
107 <div class="literallayout"><p><br>
109 inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
110 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
111 allow { <em class="replaceable"><code>address_match_element</code></em>; ... }<br>
112 [<span class="optional"> keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
113 unix <em class="replaceable"><code>unsupported</code></em>; // not implemented<br>
117 <div class="refsect1" lang="en">
118 <a name="id2549617"></a><h2>LOGGING</h2>
119 <div class="literallayout"><p><br>
121 channel <em class="replaceable"><code>string</code></em> {<br>
122 file <em class="replaceable"><code>log_file</code></em>;<br>
123 syslog <em class="replaceable"><code>optional_facility</code></em>;<br>
126 severity <em class="replaceable"><code>log_severity</code></em>;<br>
127 print-time <em class="replaceable"><code>boolean</code></em>;<br>
128 print-severity <em class="replaceable"><code>boolean</code></em>;<br>
129 print-category <em class="replaceable"><code>boolean</code></em>;<br>
131 category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
135 <div class="refsect1" lang="en">
136 <a name="id2549655"></a><h2>LWRES</h2>
137 <div class="literallayout"><p><br>
139 listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
140 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
142 view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em>;<br>
143 search { <em class="replaceable"><code>string</code></em>; ... };<br>
144 ndots <em class="replaceable"><code>integer</code></em>;<br>
148 <div class="refsect1" lang="en">
149 <a name="id2549697"></a><h2>OPTIONS</h2>
150 <div class="literallayout"><p><br>
152 avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
153 avoid-v6-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
154 blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
155 coresize <em class="replaceable"><code>size</code></em>;<br>
156 datasize <em class="replaceable"><code>size</code></em>;<br>
157 directory <em class="replaceable"><code>quoted_string</code></em>;<br>
158 cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
159 dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
160 files <em class="replaceable"><code>size</code></em>;<br>
161 heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
162 host-statistics <em class="replaceable"><code>boolean</code></em>; // not implemented<br>
163 host-statistics-max <em class="replaceable"><code>number</code></em>; // not implemented<br>
164 hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
165 interface-interval <em class="replaceable"><code>integer</code></em>;<br>
166 listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
167 listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
168 match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
169 memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
170 pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
171 port <em class="replaceable"><code>integer</code></em>;<br>
172 querylog <em class="replaceable"><code>boolean</code></em>;<br>
173 recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
174 random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
175 recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
176 serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
177 server-id ( <em class="replaceable"><code>quoted_string</code></em> | none |;<br>
178 stacksize <em class="replaceable"><code>size</code></em>;<br>
179 statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
180 statistics-interval <em class="replaceable"><code>integer</code></em>; // not yet implemented<br>
181 tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
182 tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
183 tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
184 tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
185 tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
186 transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
187 transfers-in <em class="replaceable"><code>integer</code></em>;<br>
188 transfers-out <em class="replaceable"><code>integer</code></em>;<br>
189 use-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
190 version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
191 allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
192 sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
193 topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
194 auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
195 minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
196 recursion <em class="replaceable"><code>boolean</code></em>;<br>
198 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
199 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
201 provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
202 request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
203 rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
204 additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
205 additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
206 query-source [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
207 query-source-v6 [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
208 cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
209 min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
210 lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
211 max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
212 max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
213 transfer-format ( many-answers | one-answer );<br>
214 max-cache-size <em class="replaceable"><code>size_no_default</code></em>;<br>
215 check-names ( master | slave | response )<br>
216 ( fail | warn | ignore );<br>
217 cache-file <em class="replaceable"><code>quoted_string</code></em>;<br>
218 suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
219 preferred-glue <em class="replaceable"><code>string</code></em>;<br>
220 dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
221 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
222 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
223 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
225 edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
226 root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
227 disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
228 dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
229 dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
230 dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
232 dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
233 ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
235 allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
236 allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
237 allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
239 notify <em class="replaceable"><code>notifytype</code></em>;<br>
240 notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
241 notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
242 also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
243 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
244 allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
246 forward ( first | only );<br>
247 forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
248 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
251 max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
252 max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
253 max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
254 max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
255 max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
256 max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
257 min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
258 max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
259 min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
260 multi-master <em class="replaceable"><code>boolean</code></em>;<br>
261 sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
263 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
264 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
265 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
266 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
268 alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
269 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
270 alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
271 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
272 use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
274 zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
275 key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
277 allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
278 deallocate-on-exit <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
279 fake-iquery <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
280 fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
281 has-old-clients <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
282 maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
283 max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
284 multiple-cnames <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
285 named-xfer <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
286 serial-queries <em class="replaceable"><code>integer</code></em>; // obsolete<br>
287 treat-cr-as-space <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
288 use-id-pool <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
292 <div class="refsect1" lang="en">
293 <a name="id2550312"></a><h2>VIEW</h2>
294 <div class="literallayout"><p><br>
295 view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
296 match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
297 match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
298 match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
300 key <em class="replaceable"><code>string</code></em> {<br>
301 algorithm <em class="replaceable"><code>string</code></em>;<br>
302 secret <em class="replaceable"><code>string</code></em>;<br>
305 zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
309 server ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) {<br>
314 <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ...<br>
317 allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
318 sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
319 topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
320 auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
321 minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
322 recursion <em class="replaceable"><code>boolean</code></em>;<br>
324 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
325 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
327 provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
328 request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
329 rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
330 additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
331 additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
332 query-source [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
333 query-source-v6 [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
334 cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
335 min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
336 lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
337 max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
338 max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
339 transfer-format ( many-answers | one-answer );<br>
340 max-cache-size <em class="replaceable"><code>size_no_default</code></em>;<br>
341 check-names ( master | slave | response )<br>
342 ( fail | warn | ignore );<br>
343 cache-file <em class="replaceable"><code>quoted_string</code></em>;<br>
344 suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
345 preferred-glue <em class="replaceable"><code>string</code></em>;<br>
346 dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
347 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
348 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
349 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
351 edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
352 root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
353 disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
354 dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
355 dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
357 dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
358 dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
359 ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
361 allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
362 allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
363 allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
365 notify <em class="replaceable"><code>notifytype</code></em>;<br>
366 notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
367 notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
368 also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
369 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
370 allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
372 forward ( first | only );<br>
373 forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
374 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
377 max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
378 max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
379 max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
380 max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
381 max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
382 max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
383 min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
384 max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
385 min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
386 multi-master <em class="replaceable"><code>boolean</code></em>;<br>
387 sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
389 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
390 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
391 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
392 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
394 alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
395 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
396 alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
397 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
398 use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
400 zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
401 key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
403 allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
404 fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
405 maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
406 max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
410 <div class="refsect1" lang="en">
411 <a name="id2550878"></a><h2>ZONE</h2>
412 <div class="literallayout"><p><br>
413 zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
414 type ( master | slave | stub | hint |<br>
415 forward | delegation-only );<br>
416 file <em class="replaceable"><code>quoted_string</code></em>;<br>
418 masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
419 ( <em class="replaceable"><code>masters</code></em> |<br>
420 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
421 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
424 database <em class="replaceable"><code>string</code></em>;<br>
425 delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
426 check-names ( fail | warn | ignore );<br>
427 dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
428 ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
430 allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
431 allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
432 allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
433 allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
435 ( grant | deny ) <em class="replaceable"><code>string</code></em><br>
436 ( name | subdomain | wildcard | self ) <em class="replaceable"><code>string</code></em><br>
437 <em class="replaceable"><code>rrtypelist</code></em>; ...<br>
440 notify <em class="replaceable"><code>notifytype</code></em>;<br>
441 notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
442 notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
443 also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
444 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
445 allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
447 forward ( first | only );<br>
448 forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
449 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
452 max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
453 max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
454 max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
455 max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
456 max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
457 max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
458 min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
459 max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
460 min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
461 multi-master <em class="replaceable"><code>boolean</code></em>;<br>
462 sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
464 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
465 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
466 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
467 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
469 alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
470 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
471 alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
472 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
473 use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
475 zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
476 key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
478 ixfr-base <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
479 ixfr-tmp-file <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
480 maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
481 max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
482 pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
486 <div class="refsect1" lang="en">
487 <a name="id2551216"></a><h2>FILES</h2>
489 <code class="filename">/etc/named.conf</code>
492 <div class="refsect1" lang="en">
493 <a name="id2551228"></a><h2>SEE ALSO</h2>
495 <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
496 <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
497 <span class="citerefentry"><span class="refentrytitle">BIND 9 Administrator Reference Manual</span></span>.