1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
|
<!--
- Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
- copyright notice and this permission notice appear in all copies.
-
- THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
- REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
- AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
- INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
- LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
<!-- $Id: named.conf.html,v 1.45 2008/09/25 04:45:04 tbox Exp $ -->
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>named.conf</title>
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
<a name="id2476275"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p><code class="filename">named.conf</code> — configuration file for named</p>
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543342"></a><h2>DESCRIPTION</h2>
<p><code class="filename">named.conf</code> is the configuration file
for
<span><strong class="command">named</strong></span>. Statements are enclosed
in braces and terminated with a semi-colon. Clauses in
the statements are also semi-colon terminated. The usual
comment styles are supported:
</p>
<p>
C style: /* */
</p>
<p>
C++ style: // to end of line
</p>
<p>
Unix style: # to end of line
</p>
</div>
<div class="refsect1" lang="en">
<a name="id2543370"></a><h2>ACL</h2>
<div class="literallayout"><p><br>
acl�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543386"></a><h2>KEY</h2>
<div class="literallayout"><p><br>
key�<em class="replaceable"><code>domain_name</code></em>�{<br>
algorithm�<em class="replaceable"><code>string</code></em>;<br>
secret�<em class="replaceable"><code>string</code></em>;<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543405"></a><h2>MASTERS</h2>
<div class="literallayout"><p><br>
masters�<em class="replaceable"><code>string</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>masters</code></em>�|�<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543451"></a><h2>SERVER</h2>
<div class="literallayout"><p><br>
server�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
bogus�<em class="replaceable"><code>boolean</code></em>;<br>
edns�<em class="replaceable"><code>boolean</code></em>;<br>
edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
keys�<em class="replaceable"><code>server_key</code></em>;<br>
transfers�<em class="replaceable"><code>integer</code></em>;<br>
transfer-format�(�many-answers�|�one-answer�);<br>
transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<br>
support-ixfr�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543520"></a><h2>TRUSTED-KEYS</h2>
<div class="literallayout"><p><br>
trusted-keys�{<br>
<em class="replaceable"><code>domain_name</code></em>�<em class="replaceable"><code>flags</code></em>�<em class="replaceable"><code>protocol</code></em>�<em class="replaceable"><code>algorithm</code></em>�<em class="replaceable"><code>key</code></em>;�...�<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543545"></a><h2>CONTROLS</h2>
<div class="literallayout"><p><br>
controls�{<br>
inet�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>]<br>
allow�{�<em class="replaceable"><code>address_match_element</code></em>;�...�}<br>
[<span class="optional">�keys�{�<em class="replaceable"><code>string</code></em>;�...�}�</span>];<br>
unix�<em class="replaceable"><code>unsupported</code></em>;�//�not�implemented<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543580"></a><h2>LOGGING</h2>
<div class="literallayout"><p><br>
logging�{<br>
channel�<em class="replaceable"><code>string</code></em>�{<br>
file�<em class="replaceable"><code>log_file</code></em>;<br>
syslog�<em class="replaceable"><code>optional_facility</code></em>;<br>
null;<br>
stderr;<br>
severity�<em class="replaceable"><code>log_severity</code></em>;<br>
print-time�<em class="replaceable"><code>boolean</code></em>;<br>
print-severity�<em class="replaceable"><code>boolean</code></em>;<br>
print-category�<em class="replaceable"><code>boolean</code></em>;<br>
};<br>
category�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543619"></a><h2>LWRES</h2>
<div class="literallayout"><p><br>
lwres�{<br>
listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
};<br>
view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>;<br>
search�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
ndots�<em class="replaceable"><code>integer</code></em>;<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2543660"></a><h2>OPTIONS</h2>
<div class="literallayout"><p><br>
options�{<br>
avoid-v4-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
avoid-v6-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
blackhole�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
coresize�<em class="replaceable"><code>size</code></em>;<br>
datasize�<em class="replaceable"><code>size</code></em>;<br>
directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
dump-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
files�<em class="replaceable"><code>size</code></em>;<br>
heartbeat-interval�<em class="replaceable"><code>integer</code></em>;<br>
host-statistics�<em class="replaceable"><code>boolean</code></em>;�//�not�implemented<br>
host-statistics-max�<em class="replaceable"><code>number</code></em>;�//�not�implemented<br>
hostname�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
interface-interval�<em class="replaceable"><code>integer</code></em>;<br>
listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
listen-on-v6�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
match-mapped-addresses�<em class="replaceable"><code>boolean</code></em>;<br>
memstatistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
pid-file�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
port�<em class="replaceable"><code>integer</code></em>;<br>
querylog�<em class="replaceable"><code>boolean</code></em>;<br>
recursing-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
reserved-sockets�<em class="replaceable"><code>integer</code></em>;<br>
random-device�<em class="replaceable"><code>quoted_string</code></em>;<br>
recursive-clients�<em class="replaceable"><code>integer</code></em>;<br>
serial-query-rate�<em class="replaceable"><code>integer</code></em>;<br>
server-id�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�|;<br>
stacksize�<em class="replaceable"><code>size</code></em>;<br>
statistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
statistics-interval�<em class="replaceable"><code>integer</code></em>;�//�not�yet�implemented<br>
tcp-clients�<em class="replaceable"><code>integer</code></em>;<br>
tcp-listen-queue�<em class="replaceable"><code>integer</code></em>;<br>
tkey-dhkey�<em class="replaceable"><code>quoted_string</code></em>�<em class="replaceable"><code>integer</code></em>;<br>
tkey-gssapi-credential�<em class="replaceable"><code>quoted_string</code></em>;<br>
tkey-domain�<em class="replaceable"><code>quoted_string</code></em>;<br>
transfers-per-ns�<em class="replaceable"><code>integer</code></em>;<br>
transfers-in�<em class="replaceable"><code>integer</code></em>;<br>
transfers-out�<em class="replaceable"><code>integer</code></em>;<br>
use-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
version�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
allow-recursion�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-recursion-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
sortlist�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
auth-nxdomain�<em class="replaceable"><code>boolean</code></em>;�//�default�changed<br>
minimal-responses�<em class="replaceable"><code>boolean</code></em>;<br>
recursion�<em class="replaceable"><code>boolean</code></em>;<br>
rrset-order�{<br>
[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
};<br>
provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
rfc2308-type1�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
additional-from-auth�<em class="replaceable"><code>boolean</code></em>;<br>
additional-from-cache�<em class="replaceable"><code>boolean</code></em>;<br>
query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-queryport-pool�<em class="replaceable"><code>boolean</code></em>;<br>
queryport-pool-ports�<em class="replaceable"><code>integer</code></em>;<br>
queryport-pool-updateinterval�<em class="replaceable"><code>integer</code></em>;<br>
cleaning-interval�<em class="replaceable"><code>integer</code></em>;<br>
min-roots�<em class="replaceable"><code>integer</code></em>;�//�not�implemented<br>
lame-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-ncache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-cache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
transfer-format�(�many-answers�|�one-answer�);<br>
max-cache-size�<em class="replaceable"><code>size</code></em>;<br>
max-acache-size�<em class="replaceable"><code>size</code></em>;<br>
clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
max-clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
check-names�(�master�|�slave�|�response�)<br>
(�fail�|�warn�|�ignore�);<br>
check-mx�(�fail�|�warn�|�ignore�);<br>
check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
check-mx-cname�(�fail�|�warn�|�ignore�);<br>
check-srv-cname�(�fail�|�warn�|�ignore�);<br>
cache-file�<em class="replaceable"><code>quoted_string</code></em>;�//�test�option<br>
suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
preferred-glue�<em class="replaceable"><code>string</code></em>;<br>
dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
};<br>
edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
dnssec-enable�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-validation�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-lookaside�<em class="replaceable"><code>string</code></em>�trust-anchor�<em class="replaceable"><code>string</code></em>;<br>
dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-accept-expired�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
empty-server�<em class="replaceable"><code>string</code></em>;<br>
empty-contact�<em class="replaceable"><code>string</code></em>;<br>
empty-zones-enable�<em class="replaceable"><code>boolean</code></em>;<br>
disable-empty-zone�<em class="replaceable"><code>string</code></em>;<br>
<br>
dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
ixfr-from-differences�<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
masterfile-format�(�text�|�raw�);<br>
notify�<em class="replaceable"><code>notifytype</code></em>;<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
<br>
forward�(�first�|�only�);<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
};<br>
<br>
max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
sig-re-signing-interval�<em class="replaceable"><code>integer</code></em>;<br>
sig-signing-nodes�<em class="replaceable"><code>integer</code></em>;<br>
sig-signing-signatures�<em class="replaceable"><code>integer</code></em>;<br>
sig-signing-type�<em class="replaceable"><code>integer</code></em>;<br>
<br>
transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<br>
alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
zero-no-soa-ttl-cache�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
nsec3-test-zone�<em class="replaceable"><code>boolean</code></em>;��//�testing�only<br>
<br>
allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
deallocate-on-exit�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
fake-iquery�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
fetch-glue�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
has-old-clients�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
multiple-cnames�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
named-xfer�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
serial-queries�<em class="replaceable"><code>integer</code></em>;�//�obsolete<br>
treat-cr-as-space�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
use-id-pool�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2544452"></a><h2>VIEW</h2>
<div class="literallayout"><p><br>
view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
match-clients�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
match-destinations�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
match-recursive-only�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
key�<em class="replaceable"><code>string</code></em>�{<br>
algorithm�<em class="replaceable"><code>string</code></em>;<br>
secret�<em class="replaceable"><code>string</code></em>;<br>
};<br>
<br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
...<br>
};<br>
<br>
server�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
...<br>
};<br>
<br>
trusted-keys�{<br>
<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;�...<br>
};<br>
<br>
allow-recursion�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-recursion-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
sortlist�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
auth-nxdomain�<em class="replaceable"><code>boolean</code></em>;�//�default�changed<br>
minimal-responses�<em class="replaceable"><code>boolean</code></em>;<br>
recursion�<em class="replaceable"><code>boolean</code></em>;<br>
rrset-order�{<br>
[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
};<br>
provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
rfc2308-type1�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
additional-from-auth�<em class="replaceable"><code>boolean</code></em>;<br>
additional-from-cache�<em class="replaceable"><code>boolean</code></em>;<br>
query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-queryport-pool�<em class="replaceable"><code>boolean</code></em>;<br>
queryport-pool-ports�<em class="replaceable"><code>integer</code></em>;<br>
queryport-pool-updateinterval�<em class="replaceable"><code>integer</code></em>;<br>
cleaning-interval�<em class="replaceable"><code>integer</code></em>;<br>
min-roots�<em class="replaceable"><code>integer</code></em>;�//�not�implemented<br>
lame-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-ncache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-cache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
transfer-format�(�many-answers�|�one-answer�);<br>
max-cache-size�<em class="replaceable"><code>size</code></em>;<br>
max-acache-size�<em class="replaceable"><code>size</code></em>;<br>
clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
max-clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
check-names�(�master�|�slave�|�response�)<br>
(�fail�|�warn�|�ignore�);<br>
check-mx�(�fail�|�warn�|�ignore�);<br>
check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
check-mx-cname�(�fail�|�warn�|�ignore�);<br>
check-srv-cname�(�fail�|�warn�|�ignore�);<br>
cache-file�<em class="replaceable"><code>quoted_string</code></em>;�//�test�option<br>
suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
preferred-glue�<em class="replaceable"><code>string</code></em>;<br>
dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
};<br>
edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
dnssec-enable�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-validation�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-lookaside�<em class="replaceable"><code>string</code></em>�trust-anchor�<em class="replaceable"><code>string</code></em>;<br>
dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-accept-expired�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
empty-server�<em class="replaceable"><code>string</code></em>;<br>
empty-contact�<em class="replaceable"><code>string</code></em>;<br>
empty-zones-enable�<em class="replaceable"><code>boolean</code></em>;<br>
disable-empty-zone�<em class="replaceable"><code>string</code></em>;<br>
<br>
dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
ixfr-from-differences�<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
masterfile-format�(�text�|�raw�);<br>
notify�<em class="replaceable"><code>notifytype</code></em>;<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
<br>
forward�(�first�|�only�);<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
};<br>
<br>
max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
<br>
transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<br>
alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
zero-no-soa-ttl-cache�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
fetch-glue�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2545113"></a><h2>ZONE</h2>
<div class="literallayout"><p><br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
type�(�master�|�slave�|�stub�|�hint�|<br>
forward�|�delegation-only�);<br>
file�<em class="replaceable"><code>quoted_string</code></em>;<br>
<br>
masters�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>masters</code></em>�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
};<br>
<br>
database�<em class="replaceable"><code>string</code></em>;<br>
delegation-only�<em class="replaceable"><code>boolean</code></em>;<br>
check-names�(�fail�|�warn�|�ignore�);<br>
check-mx�(�fail�|�warn�|�ignore�);<br>
check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
check-mx-cname�(�fail�|�warn�|�ignore�);<br>
check-srv-cname�(�fail�|�warn�|�ignore�);<br>
dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
ixfr-from-differences�<em class="replaceable"><code>boolean</code></em>;<br>
journal�<em class="replaceable"><code>quoted_string</code></em>;<br>
zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
update-policy�{<br>
(�grant�|�deny�)�<em class="replaceable"><code>string</code></em><br>
(�name�|�subdomain�|�wildcard�|�self�|�selfsub�|�selfwild�|<br>
������������������krb5-self�|�ms-self�|�krb5-subdomain�|�ms-subdomain�|<br>
��tcp-self�|�6to4-self�)�<em class="replaceable"><code>string</code></em><br>
<em class="replaceable"><code>rrtypelist</code></em>;�...<br>
};<br>
update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
masterfile-format�(�text�|�raw�);<br>
notify�<em class="replaceable"><code>notifytype</code></em>;<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
<br>
forward�(�first�|�only�);<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
};<br>
<br>
max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
<br>
transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<br>
alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
<br>
nsec3-test-zone�<em class="replaceable"><code>boolean</code></em>;��//�testing�only<br>
<br>
ixfr-base�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
ixfr-tmp-file�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
pubkey�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
<a name="id2545410"></a><h2>FILES</h2>
<p><code class="filename">/etc/named.conf</code>
</p>
</div>
<div class="refsect1" lang="en">
<a name="id2545421"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
</div></body>
</html>
|
