/contrib/bind9/bin/named/named.conf.html

https://bitbucket.org/freebsd/freebsd-head/ · HTML · 634 lines · 618 code · 0 blank · 16 comment · 0 complexity · 8ae4653f0dfd43effb249abaec361708 MD5 · raw file 

    

  1. <!--
    2. 

  2.  - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC")
    3. 

  3.  - 
    4. 

  4.  - Permission to use, copy, modify, and/or distribute this software for any
    5. 

  5.  - purpose with or without fee is hereby granted, provided that the above
    6. 

  6.  - copyright notice and this permission notice appear in all copies.
    7. 

  7.  - 
    8. 

  8.  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
    9. 

  9.  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
    10. 

  10.  - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
    11. 

  11.  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
    12. 

  12.  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
    13. 

  13.  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
    14. 

  14.  - PERFORMANCE OF THIS SOFTWARE.
    15. 

  15. -->
    16. 

  16. <!-- $Id$ -->
    17. 

  17. <html>
    18. 

  18. <head>
    19. 

  19. <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
    20. 

  20. <title>named.conf</title>
    21. 

  21. <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
    22. 

  22. </head>
    23. 

  23. <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
    24. 

  24. <a name="id2476275"></a><div class="titlepage"></div>
    25. 

  25. <div class="refnamediv">
    26. 

  26. <h2>Name</h2>
    27. 

  27. <p><code class="filename">named.conf</code> &#8212; configuration file for named</p>
    28. 

  28. </div>
    29. 

  29. <div class="refsynopsisdiv">
    30. 

  30. <h2>Synopsis</h2>
    31. 

  31. <div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
    32. 

  32. </div>
    33. 

  33. <div class="refsect1" lang="en">
    34. 

  34. <a name="id2543353"></a><h2>DESCRIPTION</h2>
    35. 

  35. <p><code class="filename">named.conf</code> is the configuration file
    36. 

  36.       for
    37. 

  37.       <span><strong class="command">named</strong></span>.  Statements are enclosed
    38. 

  38.       in braces and terminated with a semi-colon.  Clauses in
    39. 

  39.       the statements are also semi-colon terminated.  The usual
    40. 

  40.       comment styles are supported:
    41. 

  41.     </p>
    42. 

  42. <p>
    43. 

  43.       C style: /* */
    44. 

  44.     </p>
    45. 

  45. <p>
    46. 

  46.       C++ style: // to end of line
    47. 

  47.     </p>
    48. 

  48. <p>
    49. 

  49.       Unix style: # to end of line
    50. 

  50.     </p>
    51. 

  51. </div>
    52. 

  52. <div class="refsect1" lang="en">
    53. 

  53. <a name="id2543381"></a><h2>ACL</h2>
    54. 

  54. <div class="literallayout"><p><br>
    55. 

  55. acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    56. 

  56. <br>
    57. 

  57. </p></div>
    58. 

  58. </div>
    59. 

  59. <div class="refsect1" lang="en">
    60. 

  60. <a name="id2543397"></a><h2>KEY</h2>
    61. 

  61. <div class="literallayout"><p><br>
    62. 

  62. key <em class="replaceable"><code>domain_name</code></em> {<br>
    63. 

  63. 	algorithm <em class="replaceable"><code>string</code></em>;<br>
    64. 

  64. 	secret <em class="replaceable"><code>string</code></em>;<br>
    65. 

  65. };<br>
    66. 

  66. </p></div>
    67. 

  67. </div>
    68. 

  68. <div class="refsect1" lang="en">
    69. 

  69. <a name="id2543416"></a><h2>MASTERS</h2>
    70. 

  70. <div class="literallayout"><p><br>
    71. 

  71. masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    72. 

  72. 	( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
    73. 

  73. 	<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
    74. 

  74. };<br>
    75. 

  75. </p></div>
    76. 

  76. </div>
    77. 

  77. <div class="refsect1" lang="en">
    78. 

  78. <a name="id2543462"></a><h2>SERVER</h2>
    79. 

  79. <div class="literallayout"><p><br>
    80. 

  80. server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
    81. 

  81. 	bogus <em class="replaceable"><code>boolean</code></em>;<br>
    82. 

  82. 	edns <em class="replaceable"><code>boolean</code></em>;<br>
    83. 

  83. 	edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
    84. 

  84. 	max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
    85. 

  85. 	provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
    86. 

  86. 	request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
    87. 

  87. 	keys <em class="replaceable"><code>server_key</code></em>;<br>
    88. 

  88. 	transfers <em class="replaceable"><code>integer</code></em>;<br>
    89. 

  89. 	transfer-format ( many-answers | one-answer );<br>
    90. 

  90. 	transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
    91. 

  91. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    92. 

  92. 	transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    93. 

  93. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    94. 

  94. <br>
    95. 

  95. 	support-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    96. 

  96. };<br>
    97. 

  97. </p></div>
    98. 

  98. </div>
    99. 

  99. <div class="refsect1" lang="en">
    100. 

  100. <a name="id2543530"></a><h2>TRUSTED-KEYS</h2>
    101. 

  101. <div class="literallayout"><p><br>
    102. 

  102. trusted-keys {<br>
    103. 

  103. 	<em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
    104. 

  104. };<br>
    105. 

  105. </p></div>
    106. 

  106. </div>
    107. 

  107. <div class="refsect1" lang="en">
    108. 

  108. <a name="id2543556"></a><h2>MANAGED-KEYS</h2>
    109. 

  109. <div class="literallayout"><p><br>
    110. 

  110. managed-keys {<br>
    111. 

  111. 	<em class="replaceable"><code>domain_name</code></em> <code class="constant">initial-key</code> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
    112. 

  112. };<br>
    113. 

  113. </p></div>
    114. 

  114. </div>
    115. 

  115. <div class="refsect1" lang="en">
    116. 

  116. <a name="id2543585"></a><h2>CONTROLS</h2>
    117. 

  117. <div class="literallayout"><p><br>
    118. 

  118. controls {<br>
    119. 

  119. 	inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    120. 

  120. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
    121. 

  121. 		allow { <em class="replaceable"><code>address_match_element</code></em>; ... }<br>
    122. 

  122. 		[<span class="optional"> keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
    123. 

  123. 	unix <em class="replaceable"><code>unsupported</code></em>; // not implemented<br>
    124. 

  124. };<br>
    125. 

  125. </p></div>
    126. 

  126. </div>
    127. 

  127. <div class="refsect1" lang="en">
    128. 

  128. <a name="id2543620"></a><h2>LOGGING</h2>
    129. 

  129. <div class="literallayout"><p><br>
    130. 

  130. logging {<br>
    131. 

  131. 	channel <em class="replaceable"><code>string</code></em> {<br>
    132. 

  132. 		file <em class="replaceable"><code>log_file</code></em>;<br>
    133. 

  133. 		syslog <em class="replaceable"><code>optional_facility</code></em>;<br>
    134. 

  134. 		null;<br>
    135. 

  135. 		stderr;<br>
    136. 

  136. 		severity <em class="replaceable"><code>log_severity</code></em>;<br>
    137. 

  137. 		print-time <em class="replaceable"><code>boolean</code></em>;<br>
    138. 

  138. 		print-severity <em class="replaceable"><code>boolean</code></em>;<br>
    139. 

  139. 		print-category <em class="replaceable"><code>boolean</code></em>;<br>
    140. 

  140. 	};<br>
    141. 

  141. 	category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
    142. 

  142. };<br>
    143. 

  143. </p></div>
    144. 

  144. </div>
    145. 

  145. <div class="refsect1" lang="en">
    146. 

  146. <a name="id2543658"></a><h2>LWRES</h2>
    147. 

  147. <div class="literallayout"><p><br>
    148. 

  148. lwres {<br>
    149. 

  149. 	listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    150. 

  150. 		( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
    151. 

  151. 	};<br>
    152. 

  152. 	view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em>;<br>
    153. 

  153. 	search { <em class="replaceable"><code>string</code></em>; ... };<br>
    154. 

  154. 	ndots <em class="replaceable"><code>integer</code></em>;<br>
    155. 

  155. };<br>
    156. 

  156. </p></div>
    157. 

  157. </div>
    158. 

  158. <div class="refsect1" lang="en">
    159. 

  159. <a name="id2543700"></a><h2>OPTIONS</h2>
    160. 

  160. <div class="literallayout"><p><br>
    161. 

  161. options {<br>
    162. 

  162. 	avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
    163. 

  163. 	avoid-v6-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
    164. 

  164. 	blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    165. 

  165. 	coresize <em class="replaceable"><code>size</code></em>;<br>
    166. 

  166. 	datasize <em class="replaceable"><code>size</code></em>;<br>
    167. 

  167. 	directory <em class="replaceable"><code>quoted_string</code></em>;<br>
    168. 

  168. 	dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
    169. 

  169. 	files <em class="replaceable"><code>size</code></em>;<br>
    170. 

  170. 	heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
    171. 

  171. 	host-statistics <em class="replaceable"><code>boolean</code></em>; // not implemented<br>
    172. 

  172. 	host-statistics-max <em class="replaceable"><code>number</code></em>; // not implemented<br>
    173. 

  173. 	hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
    174. 

  174. 	interface-interval <em class="replaceable"><code>integer</code></em>;<br>
    175. 

  175. 	listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    176. 

  176. 	listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    177. 

  177. 	match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
    178. 

  178. 	memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
    179. 

  179. 	pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
    180. 

  180. 	port <em class="replaceable"><code>integer</code></em>;<br>
    181. 

  181. 	querylog <em class="replaceable"><code>boolean</code></em>;<br>
    182. 

  182. 	recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
    183. 

  183. 	reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
    184. 

  184. 	random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
    185. 

  185. 	recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
    186. 

  186. 	serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
    187. 

  187. 	server-id ( <em class="replaceable"><code>quoted_string</code></em> | none |;<br>
    188. 

  188. 	stacksize <em class="replaceable"><code>size</code></em>;<br>
    189. 

  189. 	statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
    190. 

  190. 	statistics-interval <em class="replaceable"><code>integer</code></em>; // not yet implemented<br>
    191. 

  191. 	tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
    192. 

  192. 	tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
    193. 

  193. 	tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
    194. 

  194. 	tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
    195. 

  195. 	tkey-gssapi-keytab <em class="replaceable"><code>quoted_string</code></em>;<br>
    196. 

  196. 	tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
    197. 

  197. 	transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
    198. 

  198. 	transfers-in <em class="replaceable"><code>integer</code></em>;<br>
    199. 

  199. 	transfers-out <em class="replaceable"><code>integer</code></em>;<br>
    200. 

  200. 	use-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
    201. 

  201. 	version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
    202. 

  202. 	allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    203. 

  203. 	allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    204. 

  204. 	sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    205. 

  205. 	topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
    206. 

  206. 	auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
    207. 

  207. 	minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
    208. 

  208. 	recursion <em class="replaceable"><code>boolean</code></em>;<br>
    209. 

  209. 	rrset-order {<br>
    210. 

  210. 		[<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
    211. 

  211. 		[<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
    212. 

  212. 	};<br>
    213. 

  213. 	provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
    214. 

  214. 	request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
    215. 

  215. 	rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
    216. 

  216. 	additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
    217. 

  217. 	additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
    218. 

  218. 	query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    219. 

  219. 	query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    220. 

  220. 	use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
    221. 

  221. 	queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
    222. 

  222. 	queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
    223. 

  223. 	cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
    224. 

  224. 	resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
    225. 

  225. 	min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
    226. 

  226. 	lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
    227. 

  227. 	max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
    228. 

  228. 	max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
    229. 

  229. 	transfer-format ( many-answers | one-answer );<br>
    230. 

  230. 	max-cache-size <em class="replaceable"><code>size</code></em>;<br>
    231. 

  231. 	max-acache-size <em class="replaceable"><code>size</code></em>;<br>
    232. 

  232. 	clients-per-query <em class="replaceable"><code>number</code></em>;<br>
    233. 

  233. 	max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
    234. 

  234. 	check-names ( master | slave | response )<br>
    235. 

  235. 		( fail | warn | ignore );<br>
    236. 

  236. 	check-mx ( fail | warn | ignore );<br>
    237. 

  237. 	check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
    238. 

  238. 	check-mx-cname ( fail | warn | ignore );<br>
    239. 

  239. 	check-srv-cname ( fail | warn | ignore );<br>
    240. 

  240. 	cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
    241. 

  241. 	suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
    242. 

  242. 	preferred-glue <em class="replaceable"><code>string</code></em>;<br>
    243. 

  243. 	dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    244. 

  244. 		( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
    245. 

  245. 		<em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
    246. 

  246. 		<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
    247. 

  247. 	};<br>
    248. 

  248. 	edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
    249. 

  249. 	max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
    250. 

  250. 	root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
    251. 

  251. 	disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
    252. 

  252. 	dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
    253. 

  253. 	dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
    254. 

  254. 	dnssec-lookaside ( <em class="replaceable"><code>auto</code></em> | <em class="replaceable"><code>no</code></em> | <em class="replaceable"><code>domain</code></em> trust-anchor <em class="replaceable"><code>domain</code></em> );<br>
    255. 

  255. 	dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
    256. 

  256. 	dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
    257. 

  257. <br>
    258. 

  258. 	dns64-server <em class="replaceable"><code>string</code></em>;<br>
    259. 

  259. 	dns64-contact <em class="replaceable"><code>string</code></em>;<br>
    260. 

  260. 	dns64 <em class="replaceable"><code>prefix</code></em> {<br>
    261. 

  261. 		clients { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
    262. 

  262. 		exclude { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
    263. 

  263. 		mapped { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
    264. 

  264. 		break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
    265. 

  265. 		recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
    266. 

  266. 		suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
    267. 

  267. 	};<br>
    268. 

  268. <br>
    269. 

  269. 	empty-server <em class="replaceable"><code>string</code></em>;<br>
    270. 

  270. 	empty-contact <em class="replaceable"><code>string</code></em>;<br>
    271. 

  271. 	empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
    272. 

  272. 	disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
    273. 

  273. <br>
    274. 

  274. 	dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
    275. 

  275. 	ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
    276. 

  276. <br>
    277. 

  277. 	allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    278. 

  278. 	allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    279. 

  279. 	allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    280. 

  280. 	allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    281. 

  281. 	allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    282. 

  282. 	allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    283. 

  283. 	allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    284. 

  284. 	update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
    285. 

  285. 	dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
    286. 

  286. <br>
    287. 

  287. 	masterfile-format ( text | raw );<br>
    288. 

  288. 	notify <em class="replaceable"><code>notifytype</code></em>;<br>
    289. 

  289. 	notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    290. 

  290. 	notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    291. 

  291. 	notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
    292. 

  292. 	notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
    293. 

  293. 	also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
    294. 

  294. 		[<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
    295. 

  295. 	allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    296. 

  296. <br>
    297. 

  297. 	forward ( first | only );<br>
    298. 

  298. 	forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    299. 

  299. 		( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
    300. 

  300. 	};<br>
    301. 

  301. <br>
    302. 

  302. 	max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
    303. 

  303. 	max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
    304. 

  304. 	max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
    305. 

  305. 	max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
    306. 

  306. 	max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
    307. 

  307. 	max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
    308. 

  308. 	min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
    309. 

  309. 	max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
    310. 

  310. 	min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
    311. 

  311. 	multi-master <em class="replaceable"><code>boolean</code></em>;<br>
    312. 

  312. <br>
    313. 

  313. 	sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
    314. 

  314. 	sig-re-signing-interval <em class="replaceable"><code>integer</code></em>;<br>
    315. 

  315. 	sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
    316. 

  316. 	sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
    317. 

  317. 	sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
    318. 

  318. <br>
    319. 

  319. 	transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
    320. 

  320. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    321. 

  321. 	transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    322. 

  322. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    323. 

  323. <br>
    324. 

  324. 	alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
    325. 

  325. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    326. 

  326. 	alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    327. 

  327. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    328. 

  328. 	use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
    329. 

  329. <br>
    330. 

  330. 	zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
    331. 

  331. 	key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
    332. 

  332. 	managed-keys-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
    333. 

  333. 	auto-dnssec <code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">create</code>|<code class="constant">off</code>;<br>
    334. 

  334. 	try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
    335. 

  335. 	zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
    336. 

  336. 	zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
    337. 

  337. 	dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
    338. 

  338. 	deny-answer-addresses {<br>
    339. 

  339. 		<em class="replaceable"><code>address_match_list</code></em><br>
    340. 

  340. 	} [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];<br>
    341. 

  341. 	deny-answer-aliases {<br>
    342. 

  342. 		<em class="replaceable"><code>namelist</code></em><br>
    343. 

  343. 	} [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];<br>
    344. 

  344. <br>
    345. 

  345. 	nsec3-test-zone <em class="replaceable"><code>boolean</code></em>;  // testing only<br>
    346. 

  346. <br>
    347. 

  347. 	allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
    348. 

  348. 	deallocate-on-exit <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    349. 

  349. 	fake-iquery <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    350. 

  350. 	fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    351. 

  351. 	has-old-clients <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    352. 

  352. 	maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    353. 

  353. 	max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
    354. 

  354. 	multiple-cnames <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    355. 

  355. 	named-xfer <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
    356. 

  356. 	serial-queries <em class="replaceable"><code>integer</code></em>; // obsolete<br>
    357. 

  357. 	treat-cr-as-space <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    358. 

  358. 	use-id-pool <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    359. 

  359. };<br>
    360. 

  360. </p></div>
    361. 

  361. </div>
    362. 

  362. <div class="refsect1" lang="en">
    363. 

  363. <a name="id2544574"></a><h2>VIEW</h2>
    364. 

  364. <div class="literallayout"><p><br>
    365. 

  365. view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
    366. 

  366. 	match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    367. 

  367. 	match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    368. 

  368. 	match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
    369. 

  369. <br>
    370. 

  370. 	key <em class="replaceable"><code>string</code></em> {<br>
    371. 

  371. 		algorithm <em class="replaceable"><code>string</code></em>;<br>
    372. 

  372. 		secret <em class="replaceable"><code>string</code></em>;<br>
    373. 

  373. 	};<br>
    374. 

  374. <br>
    375. 

  375. 	zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
    376. 

  376. 		...<br>
    377. 

  377. 	};<br>
    378. 

  378. <br>
    379. 

  379. 	server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
    380. 

  380. 		...<br>
    381. 

  381. 	};<br>
    382. 

  382. <br>
    383. 

  383. 	trusted-keys {<br>
    384. 

  384. 		<em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>;<br>
    385. 

  385. 		[<span class="optional">...</span>]<br>
    386. 

  386. 	};<br>
    387. 

  387. <br>
    388. 

  388. 	allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    389. 

  389. 	allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    390. 

  390. 	sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    391. 

  391. 	topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
    392. 

  392. 	auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
    393. 

  393. 	minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
    394. 

  394. 	recursion <em class="replaceable"><code>boolean</code></em>;<br>
    395. 

  395. 	rrset-order {<br>
    396. 

  396. 		[<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
    397. 

  397. 		[<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
    398. 

  398. 	};<br>
    399. 

  399. 	provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
    400. 

  400. 	request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
    401. 

  401. 	rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
    402. 

  402. 	additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
    403. 

  403. 	additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
    404. 

  404. 	query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    405. 

  405. 	query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    406. 

  406. 	use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
    407. 

  407. 	queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
    408. 

  408. 	queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
    409. 

  409. 	cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
    410. 

  410. 	resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
    411. 

  411. 	min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
    412. 

  412. 	lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
    413. 

  413. 	max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
    414. 

  414. 	max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
    415. 

  415. 	transfer-format ( many-answers | one-answer );<br>
    416. 

  416. 	max-cache-size <em class="replaceable"><code>size</code></em>;<br>
    417. 

  417. 	max-acache-size <em class="replaceable"><code>size</code></em>;<br>
    418. 

  418. 	clients-per-query <em class="replaceable"><code>number</code></em>;<br>
    419. 

  419. 	max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
    420. 

  420. 	check-names ( master | slave | response )<br>
    421. 

  421. 		( fail | warn | ignore );<br>
    422. 

  422. 	check-mx ( fail | warn | ignore );<br>
    423. 

  423. 	check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
    424. 

  424. 	check-mx-cname ( fail | warn | ignore );<br>
    425. 

  425. 	check-srv-cname ( fail | warn | ignore );<br>
    426. 

  426. 	cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
    427. 

  427. 	suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
    428. 

  428. 	preferred-glue <em class="replaceable"><code>string</code></em>;<br>
    429. 

  429. 	dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    430. 

  430. 		( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
    431. 

  431. 		<em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
    432. 

  432. 		<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
    433. 

  433. 	};<br>
    434. 

  434. 	edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
    435. 

  435. 	max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
    436. 

  436. 	root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
    437. 

  437. 	disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
    438. 

  438. 	dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
    439. 

  439. 	dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
    440. 

  440. 	dnssec-lookaside ( <em class="replaceable"><code>auto</code></em> | <em class="replaceable"><code>no</code></em> | <em class="replaceable"><code>domain</code></em> trust-anchor <em class="replaceable"><code>domain</code></em> );<br>
    441. 

  441. 	dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
    442. 

  442. 	dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
    443. 

  443. <br>
    444. 

  444. 	dns64-server <em class="replaceable"><code>string</code></em>;<br>
    445. 

  445. 	dns64-contact <em class="replaceable"><code>string</code></em>;<br>
    446. 

  446. 	dns64 <em class="replaceable"><code>prefix</code></em> {<br>
    447. 

  447. 		clients { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
    448. 

  448. 		exclude { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
    449. 

  449. 		mapped { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
    450. 

  450. 		break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
    451. 

  451. 		recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
    452. 

  452. 		suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
    453. 

  453. 	};<br>
    454. 

  454. <br>
    455. 

  455. 	empty-server <em class="replaceable"><code>string</code></em>;<br>
    456. 

  456. 	empty-contact <em class="replaceable"><code>string</code></em>;<br>
    457. 

  457. 	empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
    458. 

  458. 	disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
    459. 

  459. <br>
    460. 

  460. 	dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
    461. 

  461. 	ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
    462. 

  462. <br>
    463. 

  463. 	allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    464. 

  464. 	allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    465. 

  465. 	allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    466. 

  466. 	allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    467. 

  467. 	allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    468. 

  468. 	allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    469. 

  469. 	allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    470. 

  470. 	update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
    471. 

  471. 	dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
    472. 

  472. <br>
    473. 

  473. 	masterfile-format ( text | raw );<br>
    474. 

  474. 	notify <em class="replaceable"><code>notifytype</code></em>;<br>
    475. 

  475. 	notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    476. 

  476. 	notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    477. 

  477. 	notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
    478. 

  478. 	notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
    479. 

  479. 	also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
    480. 

  480. 		[<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
    481. 

  481. 	allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    482. 

  482. <br>
    483. 

  483. 	forward ( first | only );<br>
    484. 

  484. 	forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    485. 

  485. 		( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
    486. 

  486. 	};<br>
    487. 

  487. <br>
    488. 

  488. 	max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
    489. 

  489. 	max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
    490. 

  490. 	max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
    491. 

  491. 	max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
    492. 

  492. 	max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
    493. 

  493. 	max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
    494. 

  494. 	min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
    495. 

  495. 	max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
    496. 

  496. 	min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
    497. 

  497. 	multi-master <em class="replaceable"><code>boolean</code></em>;<br>
    498. 

  498. 	sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
    499. 

  499. <br>
    500. 

  500. 	transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
    501. 

  501. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    502. 

  502. 	transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    503. 

  503. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    504. 

  504. <br>
    505. 

  505. 	alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
    506. 

  506. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    507. 

  507. 	alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    508. 

  508. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    509. 

  509. 	use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
    510. 

  510. <br>
    511. 

  511. 	zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
    512. 

  512. 	try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
    513. 

  513. 	key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
    514. 

  514. 	zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
    515. 

  515. 	zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
    516. 

  516. 	dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
    517. 

  517. <br>
    518. 

  518. 	allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
    519. 

  519. 	fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    520. 

  520. 	maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    521. 

  521. 	max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
    522. 

  522. };<br>
    523. 

  523. </p></div>
    524. 

  524. </div>
    525. 

  525. <div class="refsect1" lang="en">
    526. 

  526. <a name="id2545284"></a><h2>ZONE</h2>
    527. 

  527. <div class="literallayout"><p><br>
    528. 

  528. zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
    529. 

  529. 	type ( master | slave | stub | hint |<br>
    530. 

  530. 		forward | delegation-only );<br>
    531. 

  531. 	file <em class="replaceable"><code>quoted_string</code></em>;<br>
    532. 

  532. <br>
    533. 

  533. 	masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    534. 

  534. 		( <em class="replaceable"><code>masters</code></em> |<br>
    535. 

  535. 		<em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
    536. 

  536. 		<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
    537. 

  537. 	};<br>
    538. 

  538. <br>
    539. 

  539. 	database <em class="replaceable"><code>string</code></em>;<br>
    540. 

  540. 	delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
    541. 

  541. 	check-names ( fail | warn | ignore );<br>
    542. 

  542. 	check-mx ( fail | warn | ignore );<br>
    543. 

  543. 	check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
    544. 

  544. 	check-mx-cname ( fail | warn | ignore );<br>
    545. 

  545. 	check-srv-cname ( fail | warn | ignore );<br>
    546. 

  546. 	dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
    547. 

  547. 	ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
    548. 

  548. 	journal <em class="replaceable"><code>quoted_string</code></em>;<br>
    549. 

  549. 	zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
    550. 

  550. 	dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
    551. 

  551. <br>
    552. 

  552. 	allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    553. 

  553. 	allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    554. 

  554. 	allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    555. 

  555. 	allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    556. 

  556. 	allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    557. 

  557. 	update-policy <em class="replaceable"><code>local</code></em> | <em class="replaceable"><code> {<br>
    558. 

  558. 		( grant | deny ) <em class="replaceable"><code>string</code></em><br>
    559. 

  559. 		( name | subdomain | wildcard | self | selfsub | selfwild |<br>
    560. 

  560.                   krb5-self | ms-self | krb5-subdomain | ms-subdomain |<br>
    561. 

  561. 		  tcp-self | zonesub | 6to4-self ) <em class="replaceable"><code>string</code></em><br>
    562. 

  562. 		<em class="replaceable"><code>rrtypelist</code></em>;<br>
    563. 

  563. 		[<span class="optional">...</span>]<br>
    564. 

  564. 	}</code></em>;<br>
    565. 

  565. 	update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
    566. 

  566. 	dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
    567. 

  567. <br>
    568. 

  568. 	masterfile-format ( text | raw );<br>
    569. 

  569. 	notify <em class="replaceable"><code>notifytype</code></em>;<br>
    570. 

  570. 	notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    571. 

  571. 	notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    572. 

  572. 	notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
    573. 

  573. 	notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
    574. 

  574. 	also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
    575. 

  575. 		[<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
    576. 

  576. 	allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
    577. 

  577. <br>
    578. 

  578. 	forward ( first | only );<br>
    579. 

  579. 	forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
    580. 

  580. 		( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
    581. 

  581. 	};<br>
    582. 

  582. <br>
    583. 

  583. 	max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
    584. 

  584. 	max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
    585. 

  585. 	max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
    586. 

  586. 	max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
    587. 

  587. 	max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
    588. 

  588. 	max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
    589. 

  589. 	min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
    590. 

  590. 	max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
    591. 

  591. 	min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
    592. 

  592. 	multi-master <em class="replaceable"><code>boolean</code></em>;<br>
    593. 

  593. 	sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
    594. 

  594. <br>
    595. 

  595. 	transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
    596. 

  596. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    597. 

  597. 	transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    598. 

  598. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    599. 

  599. <br>
    600. 

  600. 	alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
    601. 

  601. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    602. 

  602. 	alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
    603. 

  603. 		[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
    604. 

  604. 	use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
    605. 

  605. <br>
    606. 

  606. 	zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
    607. 

  607. 	try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
    608. 

  608. 	key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
    609. 

  609. <br>
    610. 

  610. 	nsec3-test-zone <em class="replaceable"><code>boolean</code></em>;  // testing only<br>
    611. 

  611. <br>
    612. 

  612. 	ixfr-base <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
    613. 

  613. 	ixfr-tmp-file <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
    614. 

  614. 	maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
    615. 

  615. 	max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
    616. 

  616. 	pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
    617. 

  617. };<br>
    618. 

  618. </p></div>
    619. 

  619. </div>
    620. 

  620. <div class="refsect1" lang="en">
    621. 

  621. <a name="id2545664"></a><h2>FILES</h2>
    622. 

  622. <p><code class="filename">/etc/named.conf</code>
    623. 

  623.     </p>
    624. 

  624. </div>
    625. 

  625. <div class="refsect1" lang="en">
    626. 

  626. <a name="id2545675"></a><h2>SEE ALSO</h2>
    627. 

  627. <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
    628. 

  628.       <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
    629. 

  629.       <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
    630. 

  630.       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
    631. 

  631.     </p>
    632. 

  632. </div>
    633. 

  633. </div></body>
    634. 

  634. </html>
    635.