mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-25 02:42:33 -05:00
769 lines
48 KiB
HTML
769 lines
48 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
|
||
<!--
|
||
- Copyright (C) 2000-2016 Internet Systems Consortium, Inc. ("ISC")
|
||
-
|
||
- This Source Code Form is subject to the terms of the Mozilla Public
|
||
- License, v. 2.0. If a copy of the MPL was not distributed with this
|
||
- file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
||
-->
|
||
<html lang="en">
|
||
<head>
|
||
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
|
||
<title>named.conf</title>
|
||
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
|
||
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
|
||
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
|
||
<link rel="prev" href="man.named.html" title="named">
|
||
<link rel="next" href="man.named-checkconf.html" title="named-checkconf">
|
||
</head>
|
||
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
||
<div class="navheader">
|
||
<table width="100%" summary="Navigation header">
|
||
<tr><th colspan="3" align="center"><code class="filename">named.conf</code></th></tr>
|
||
<tr>
|
||
<td width="20%" align="left">
|
||
<a accesskey="p" href="man.named.html">Prev</a> </td>
|
||
<th width="60%" align="center">Manual pages</th>
|
||
<td width="20%" align="right"> <a accesskey="n" href="man.named-checkconf.html">Next</a>
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
<hr>
|
||
</div>
|
||
<div class="refentry">
|
||
<a name="man.named.conf"></a><div class="titlepage"></div>
|
||
|
||
|
||
|
||
|
||
|
||
<div class="refnamediv">
|
||
<h2>Name</h2>
|
||
<p>
|
||
<code class="filename">named.conf</code>
|
||
— configuration file for <span class="command"><strong>named</strong></span>
|
||
</p>
|
||
</div>
|
||
|
||
|
||
|
||
<div class="refsynopsisdiv">
|
||
<h2>Synopsis</h2>
|
||
<div class="cmdsynopsis"><p>
|
||
<code class="command">named.conf</code>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.7"></a><h2>DESCRIPTION</h2>
|
||
|
||
<p><code class="filename">named.conf</code> is the configuration file
|
||
for
|
||
<span class="command"><strong>named</strong></span>. Statements are enclosed
|
||
in braces and terminated with a semi-colon. Clauses in
|
||
the statements are also semi-colon terminated. The usual
|
||
comment styles are supported:
|
||
</p>
|
||
<p>
|
||
C style: /* */
|
||
</p>
|
||
<p>
|
||
C++ style: // to end of line
|
||
</p>
|
||
<p>
|
||
Unix style: # to end of line
|
||
</p>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.8"></a><h2>ACL</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.9"></a><h2>KEY</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
key <em class="replaceable"><code>domain_name</code></em> {<br>
|
||
algorithm <em class="replaceable"><code>string</code></em>;<br>
|
||
secret <em class="replaceable"><code>string</code></em>;<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.10"></a><h2>MASTERS</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
|
||
<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.11"></a><h2>SERVER</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
|
||
bogus <em class="replaceable"><code>boolean</code></em>;<br>
|
||
edns <em class="replaceable"><code>boolean</code></em>;<br>
|
||
edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
|
||
provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
|
||
request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
|
||
keys <em class="replaceable"><code>server_key</code></em>;<br>
|
||
transfers <em class="replaceable"><code>integer</code></em>;<br>
|
||
transfer-format ( many-answers | one-answer );<br>
|
||
transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
<br>
|
||
support-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.12"></a><h2>TRUSTED-KEYS</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
trusted-keys {<br>
|
||
<em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ...<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.13"></a><h2>MANAGED-KEYS</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
managed-keys {<br>
|
||
<em class="replaceable"><code>domain_name</code></em> <code class="constant">initial-key</code> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ...<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.14"></a><h2>CONTROLS</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
controls {<br>
|
||
inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
|
||
allow { <em class="replaceable"><code>address_match_element</code></em>; ... }<br>
|
||
[<span class="optional"> keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
|
||
unix <em class="replaceable"><code>unsupported</code></em>; // not implemented<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.15"></a><h2>LOGGING</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
logging {<br>
|
||
channel <em class="replaceable"><code>string</code></em> {<br>
|
||
file <em class="replaceable"><code>log_file</code></em>;<br>
|
||
syslog <em class="replaceable"><code>optional_facility</code></em>;<br>
|
||
null;<br>
|
||
stderr;<br>
|
||
severity <em class="replaceable"><code>log_severity</code></em>;<br>
|
||
print-time <em class="replaceable"><code>boolean</code></em>;<br>
|
||
print-severity <em class="replaceable"><code>boolean</code></em>;<br>
|
||
print-category <em class="replaceable"><code>boolean</code></em>;<br>
|
||
};<br>
|
||
category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.16"></a><h2>LWRES</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
lwres {<br>
|
||
listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
|
||
};<br>
|
||
view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em>;<br>
|
||
search { <em class="replaceable"><code>string</code></em>; ... };<br>
|
||
ndots <em class="replaceable"><code>integer</code></em>;<br>
|
||
lwres-tasks <em class="replaceable"><code>integer</code></em>;<br>
|
||
lwres-clients <em class="replaceable"><code>integer</code></em>;<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.17"></a><h2>OPTIONS</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
options {<br>
|
||
avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
|
||
avoid-v6-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
|
||
blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
coresize <em class="replaceable"><code>size</code></em>;<br>
|
||
datasize <em class="replaceable"><code>size</code></em>;<br>
|
||
directory <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
dnstap { <em class="replaceable"><code>message_type</code></em>; ... };<br>
|
||
dnstap-output ( <code class="literal">file</code> | <code class="literal">unix</code> ) <em class="replaceable"><code>path_name</code></em>;<br>
|
||
dnstap-identity ( <em class="replaceable"><code>string</code></em> | <code class="literal">hostname</code> | <code class="literal">none</code> );<br>
|
||
dnstap-version ( <em class="replaceable"><code>string</code></em> | <code class="literal">none</code> );<br>
|
||
dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
files <em class="replaceable"><code>size</code></em>;<br>
|
||
fstrm-set-buffer-hint <em class="replaceable"><code>number</code></em>;<br>
|
||
fstrm-set-flush-timeout <em class="replaceable"><code>number</code></em>;<br>
|
||
fstrm-set-input-queue-size <em class="replaceable"><code>number</code></em>;<br>
|
||
fstrm-set-output-notify-threshold <em class="replaceable"><code>number</code></em>;<br>
|
||
fstrm-set-output-queue-model ( <em class="replaceable"><code>mpsc</code></em> | <em class="replaceable"><code>spsc</code></em> ) ;<br>
|
||
fstrm-set-output-queue-size <em class="replaceable"><code>number</code></em>;<br>
|
||
fstrm-set-reopen-interval <em class="replaceable"><code>number</code></em>;<br>
|
||
heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
host-statistics <em class="replaceable"><code>boolean</code></em>; // not implemented<br>
|
||
host-statistics-max <em class="replaceable"><code>number</code></em>; // not implemented<br>
|
||
hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
|
||
interface-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
keep-response-order { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
|
||
memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
|
||
port <em class="replaceable"><code>integer</code></em>;<br>
|
||
querylog <em class="replaceable"><code>boolean</code></em>;<br>
|
||
recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
|
||
random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
|
||
serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
|
||
server-id ( <em class="replaceable"><code>quoted_string</code></em> | hostname | none );<br>
|
||
stacksize <em class="replaceable"><code>size</code></em>;<br>
|
||
statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
statistics-interval <em class="replaceable"><code>integer</code></em>; // not yet implemented<br>
|
||
tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
|
||
tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
|
||
tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
|
||
tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
tkey-gssapi-keytab <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
transfer-message-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
|
||
transfers-in <em class="replaceable"><code>integer</code></em>;<br>
|
||
transfers-out <em class="replaceable"><code>integer</code></em>;<br>
|
||
version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
|
||
allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
|
||
auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
|
||
minimal-any <em class="replaceable"><code>boolean</code></em>;<br>
|
||
minimal-responses ( <em class="replaceable"><code>boolean</code></em> | no-auth | no-auth-recursive );<br>
|
||
recursion <em class="replaceable"><code>boolean</code></em>;<br>
|
||
rrset-order {<br>
|
||
[<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
|
||
[<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
|
||
};<br>
|
||
provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
|
||
request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
|
||
rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
|
||
additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
|
||
additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
|
||
query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
|
||
queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
|
||
queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
|
||
cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
|
||
lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
|
||
transfer-format ( many-answers | one-answer );<br>
|
||
max-cache-size <em class="replaceable"><code>size</code></em>;<br>
|
||
max-acache-size <em class="replaceable"><code>size</code></em>;<br>
|
||
clients-per-query <em class="replaceable"><code>number</code></em>;<br>
|
||
max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
|
||
check-names ( master | slave | response )<br>
|
||
( fail | warn | ignore );<br>
|
||
check-mx ( fail | warn | ignore );<br>
|
||
check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
|
||
check-mx-cname ( fail | warn | ignore );<br>
|
||
check-srv-cname ( fail | warn | ignore );<br>
|
||
cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
|
||
catalog-zones {<br>
|
||
zone <em class="replaceable"><code>quoted_string</code></em><br>
|
||
[<span class="optional"> default-masters<br>
|
||
[<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>]<br>
|
||
[<span class="optional">dscp <em class="replaceable"><code>ip_dscp</code></em></span>]<br>
|
||
{ ( <em class="replaceable"><code>masters_list</code></em> | <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] [<span class="optional">key <em class="replaceable"><code>key</code></em></span>] ) ; [<span class="optional">...</span>] }</span>]<br>
|
||
[<span class="optional">in-memory <em class="replaceable"><code>yes_or_no</code></em></span>]<br>
|
||
[<span class="optional">min-update-interval <em class="replaceable"><code>interval</code></em></span>]<br>
|
||
; ... };<br>
|
||
;<br>
|
||
suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
|
||
preferred-glue <em class="replaceable"><code>string</code></em>;<br>
|
||
dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
|
||
<em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
|
||
<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
|
||
};<br>
|
||
edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
|
||
disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
|
||
disable-ds-digests <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
|
||
dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-lookaside ( <em class="replaceable"><code>auto</code></em> | <em class="replaceable"><code>no</code></em> | <em class="replaceable"><code>domain</code></em> trust-anchor <em class="replaceable"><code>domain</code></em> );<br>
|
||
dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
dns64-server <em class="replaceable"><code>string</code></em>;<br>
|
||
dns64-contact <em class="replaceable"><code>string</code></em>;<br>
|
||
dns64 <em class="replaceable"><code>prefix</code></em> {<br>
|
||
clients { <em class="replaceable"><code>acl</code></em>; };<br>
|
||
exclude { <em class="replaceable"><code>acl</code></em>; };<br>
|
||
mapped { <em class="replaceable"><code>acl</code></em>; };<br>
|
||
break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
|
||
recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
|
||
suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
|
||
};<br>
|
||
<br>
|
||
empty-server <em class="replaceable"><code>string</code></em>;<br>
|
||
empty-contact <em class="replaceable"><code>string</code></em>;<br>
|
||
empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
|
||
disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
|
||
<br>
|
||
dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
|
||
ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
|
||
<br>
|
||
allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
masterfile-format ( text | raw | map );<br>
|
||
notify <em class="replaceable"><code>notifytype</code></em>;<br>
|
||
notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
|
||
notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
|
||
also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
|
||
[<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
|
||
[<span class="optional"> key <em class="replaceable"><code>keyname</code></em> </span>] ... };<br>
|
||
allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
<br>
|
||
forward ( first | only );<br>
|
||
forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
|
||
};<br>
|
||
<br>
|
||
max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
|
||
max-records <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
multi-master <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
sig-re-signing-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
|
||
sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
|
||
sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
|
||
<br>
|
||
transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
<br>
|
||
alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
|
||
key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
managed-keys-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
auto-dnssec <code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">off</code>;<br>
|
||
try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
|
||
zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
|
||
zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
|
||
automatic-interface-scan <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
cookie-algorithm ( <em class="replaceable"><code>aes</code></em> | <em class="replaceable"><code>sha1</code></em> | <em class="replaceable"><code>sha256</code></em> );<br>
|
||
cookie-secret <em class="replaceable"><code>string</code></em>;<br>
|
||
require-server-cookie <em class="replaceable"><code>boolean</code></em>;<br>
|
||
send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
|
||
nocookie-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
<br>
|
||
deny-answer-addresses {<br>
|
||
<em class="replaceable"><code>address_match_list</code></em><br>
|
||
} [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];<br>
|
||
deny-answer-aliases {<br>
|
||
<em class="replaceable"><code>namelist</code></em><br>
|
||
} [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];<br>
|
||
<br>
|
||
nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // testing only<br>
|
||
<br>
|
||
allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
|
||
deallocate-on-exit <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
fake-iquery <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
has-old-clients <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
|
||
multiple-cnames <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
named-xfer <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
|
||
serial-queries <em class="replaceable"><code>integer</code></em>; // obsolete<br>
|
||
treat-cr-as-space <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
use-id-pool <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
use-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.18"></a><h2>VIEW</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
|
||
match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
key <em class="replaceable"><code>string</code></em> {<br>
|
||
algorithm <em class="replaceable"><code>string</code></em>;<br>
|
||
secret <em class="replaceable"><code>string</code></em>;<br>
|
||
};<br>
|
||
<br>
|
||
zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
|
||
...<br>
|
||
};<br>
|
||
<br>
|
||
server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
|
||
...<br>
|
||
};<br>
|
||
<br>
|
||
trusted-keys {<br>
|
||
<em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
[<span class="optional">...</span>]<br>
|
||
};<br>
|
||
<br>
|
||
managed-keys {<br>
|
||
<em class="replaceable"><code>domain_name</code></em> <code class="constant">initial-key</code> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>;<br>
|
||
[<span class="optional">...</span>]<br>
|
||
};<br>
|
||
<br>
|
||
allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
|
||
auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
|
||
minimal-any <em class="replaceable"><code>boolean</code></em>;<br>
|
||
minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
|
||
recursion <em class="replaceable"><code>boolean</code></em>;<br>
|
||
rrset-order {<br>
|
||
[<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
|
||
[<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
|
||
};<br>
|
||
provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
|
||
request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
|
||
rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
|
||
additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
|
||
additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
|
||
query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
|
||
queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
|
||
queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
|
||
cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
|
||
lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
|
||
transfer-format ( many-answers | one-answer );<br>
|
||
max-cache-size <em class="replaceable"><code>size</code></em>;<br>
|
||
max-acache-size <em class="replaceable"><code>size</code></em>;<br>
|
||
clients-per-query <em class="replaceable"><code>number</code></em>;<br>
|
||
max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
|
||
check-names ( master | slave | response )<br>
|
||
( fail | warn | ignore );<br>
|
||
check-mx ( fail | warn | ignore );<br>
|
||
check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
|
||
check-mx-cname ( fail | warn | ignore );<br>
|
||
check-srv-cname ( fail | warn | ignore );<br>
|
||
cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
|
||
suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
|
||
preferred-glue <em class="replaceable"><code>string</code></em>;<br>
|
||
dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
|
||
<em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
|
||
<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
|
||
};<br>
|
||
edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
|
||
disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
|
||
disable-ds-digests <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
|
||
dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-lookaside ( <em class="replaceable"><code>auto</code></em> | <em class="replaceable"><code>no</code></em> | <em class="replaceable"><code>domain</code></em> trust-anchor <em class="replaceable"><code>domain</code></em> );<br>
|
||
dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
dns64-server <em class="replaceable"><code>string</code></em>;<br>
|
||
dns64-contact <em class="replaceable"><code>string</code></em>;<br>
|
||
dns64 <em class="replaceable"><code>prefix</code></em> {<br>
|
||
clients { <em class="replaceable"><code>acl</code></em>; };<br>
|
||
exclude { <em class="replaceable"><code>acl</code></em>; };<br>
|
||
mapped { <em class="replaceable"><code>acl</code></em>; };<br>
|
||
break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
|
||
recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
|
||
suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
|
||
};<br>
|
||
<br>
|
||
empty-server <em class="replaceable"><code>string</code></em>;<br>
|
||
empty-contact <em class="replaceable"><code>string</code></em>;<br>
|
||
empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
|
||
disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
|
||
<br>
|
||
dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
|
||
ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
|
||
<br>
|
||
allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
masterfile-format ( text | raw | map );<br>
|
||
notify <em class="replaceable"><code>notifytype</code></em>;<br>
|
||
notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
|
||
notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
|
||
also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
|
||
[<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
|
||
[<span class="optional"> key <em class="replaceable"><code>keyname</code></em> </span>] ... };<br>
|
||
allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
<br>
|
||
forward ( first | only );<br>
|
||
forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
|
||
};<br>
|
||
<br>
|
||
max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
|
||
max-records <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
multi-master <em class="replaceable"><code>boolean</code></em>;<br>
|
||
sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
<br>
|
||
transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
<br>
|
||
alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
|
||
try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
|
||
key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
|
||
zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
require-server-cookie <em class="replaceable"><code>boolean</code></em>;<br>
|
||
send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
|
||
nocookie-udp-size <em class="replaceable"><code>integer</code></em>;<br>
|
||
<br>
|
||
allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
|
||
fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.19"></a><h2>ZONE</h2>
|
||
|
||
<div class="literallayout"><p><br>
|
||
zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
|
||
type ( master | slave | stub | hint | redirect |<br>
|
||
forward | delegation-only );<br>
|
||
file <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
<br>
|
||
masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>masters</code></em> |<br>
|
||
<em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
|
||
<em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
|
||
};<br>
|
||
<br>
|
||
database <em class="replaceable"><code>string</code></em>;<br>
|
||
delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
|
||
check-names ( fail | warn | ignore );<br>
|
||
check-mx ( fail | warn | ignore );<br>
|
||
check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
|
||
check-mx-cname ( fail | warn | ignore );<br>
|
||
check-srv-cname ( fail | warn | ignore );<br>
|
||
dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
|
||
ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
|
||
journal <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
update-policy <em class="replaceable"><code>local</code></em> | <em class="replaceable"><code> {<br>
|
||
( grant | deny ) <em class="replaceable"><code>string</code></em><br>
|
||
( name | subdomain | wildcard | self | selfsub | selfwild |<br>
|
||
krb5-self | ms-self | krb5-subdomain | ms-subdomain |<br>
|
||
tcp-self | zonesub | 6to4-self ) <em class="replaceable"><code>string</code></em><br>
|
||
<em class="replaceable"><code>rrtypelist</code></em>;<br>
|
||
[<span class="optional">...</span>]<br>
|
||
}</code></em>;<br>
|
||
update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
|
||
dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
masterfile-format ( text | raw | map );<br>
|
||
notify <em class="replaceable"><code>notifytype</code></em>;<br>
|
||
notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
|
||
notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
|
||
also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
|
||
[<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
|
||
[<span class="optional"> key <em class="replaceable"><code>keyname</code></em> </span>] ... };<br>
|
||
allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
|
||
<br>
|
||
forward ( first | only );<br>
|
||
forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
|
||
( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
|
||
};<br>
|
||
<br>
|
||
max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
|
||
max-records <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
|
||
multi-master <em class="replaceable"><code>boolean</code></em>;<br>
|
||
request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
|
||
sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
|
||
<br>
|
||
transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
<br>
|
||
alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
|
||
[<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
|
||
use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
|
||
<br>
|
||
zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
|
||
try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
|
||
key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
|
||
<br>
|
||
nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // testing only<br>
|
||
<br>
|
||
ixfr-base <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
|
||
ixfr-tmp-file <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
|
||
maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
|
||
max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
|
||
pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
|
||
};<br>
|
||
</p></div>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.20"></a><h2>FILES</h2>
|
||
|
||
<p><code class="filename">/etc/named.conf</code>
|
||
</p>
|
||
</div>
|
||
|
||
<div class="refsection">
|
||
<a name="id-1.14.20.21"></a><h2>SEE ALSO</h2>
|
||
|
||
<p><span class="citerefentry">
|
||
<span class="refentrytitle">named</span>(8)
|
||
</span>,
|
||
<span class="citerefentry">
|
||
<span class="refentrytitle">named-checkconf</span>(8)
|
||
</span>,
|
||
<span class="citerefentry">
|
||
<span class="refentrytitle">rndc</span>(8)
|
||
</span>,
|
||
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
|
||
</p>
|
||
</div>
|
||
|
||
</div>
|
||
<div class="navfooter">
|
||
<hr>
|
||
<table width="100%" summary="Navigation footer">
|
||
<tr>
|
||
<td width="40%" align="left">
|
||
<a accesskey="p" href="man.named.html">Prev</a> </td>
|
||
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
|
||
<td width="40%" align="right"> <a accesskey="n" href="man.named-checkconf.html">Next</a>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td width="40%" align="left" valign="top">
|
||
<span class="application">named</span> </td>
|
||
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
|
||
<td width="40%" align="right" valign="top"> <span class="application">named-checkconf</span>
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
</div>
|
||
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.1rc3</p>
|
||
</body>
|
||
</html>
|