1 .\" Copyright (C) 2004-2011, 2013-2015 Internet Systems Consortium, Inc. ("ISC")
3 .\" Permission to use, copy, modify, and/or distribute this software for any
4 .\" purpose with or without fee is hereby granted, provided that the above
5 .\" copyright notice and this permission notice appear in all copies.
7 .\" THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
8 .\" REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
9 .\" AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
10 .\" INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
11 .\" LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
12 .\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
13 .\" PERFORMANCE OF THIS SOFTWARE.
20 .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
26 .TH "NAMED\&.CONF" "5" "2014\-01\-08" "ISC" "BIND9"
27 .\" -----------------------------------------------------------------
28 .\" * Define some portability stuff
29 .\" -----------------------------------------------------------------
30 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
31 .\" http://bugs.debian.org/507673
32 .\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
33 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
36 .\" -----------------------------------------------------------------
37 .\" * set default formatting
38 .\" -----------------------------------------------------------------
39 .\" disable hyphenation
41 .\" disable justification (adjust text to left margin only)
43 .\" -----------------------------------------------------------------
44 .\" * MAIN CONTENT STARTS HERE *
45 .\" -----------------------------------------------------------------
47 named.conf \- configuration file for named
49 .HP \w'\fBnamed\&.conf\fR\ 'u
54 is the configuration file for
55 \fBnamed\fR\&. Statements are enclosed in braces and terminated with a semi\-colon\&. Clauses in the statements are also semi\-colon terminated\&. The usual comment styles are supported:
59 C++ style: // to end of line
61 Unix style: # to end of line
68 acl \fIstring\fR { \fIaddress_match_element\fR; \&.\&.\&. };
79 key \fIdomain_name\fR {
80 algorithm \fIstring\fR;
93 masters \fIstring\fR [ port \fIinteger\fR ] {
94 ( \fImasters\fR | \fIipv4_address\fR [port \fIinteger\fR] |
95 \fIipv6_address\fR [port \fIinteger\fR] ) [ key \fIstring\fR ]; \&.\&.\&.
107 server ( \fIipv4_address\fR\fI[/prefixlen]\fR | \fIipv6_address\fR\fI[/prefixlen]\fR ) {
110 edns\-udp\-size \fIinteger\fR;
111 max\-udp\-size \fIinteger\fR;
112 provide\-ixfr \fIboolean\fR;
113 request\-ixfr \fIboolean\fR;
114 keys \fIserver_key\fR;
115 transfers \fIinteger\fR;
116 transfer\-format ( many\-answers | one\-answer );
117 transfer\-source ( \fIipv4_address\fR | * )
118 [ port ( \fIinteger\fR | * ) ];
119 transfer\-source\-v6 ( \fIipv6_address\fR | * )
120 [ port ( \fIinteger\fR | * ) ];
121 support\-ixfr \fIboolean\fR; // obsolete
134 \fIdomain_name\fR \fIflags\fR \fIprotocol\fR \fIalgorithm\fR \fIkey\fR; \&.\&.\&.
147 \fIdomain_name\fR \fBinitial\-key\fR \fIflags\fR \fIprotocol\fR \fIalgorithm\fR \fIkey\fR; \&.\&.\&.
160 inet ( \fIipv4_address\fR | \fIipv6_address\fR | * )
161 [ port ( \fIinteger\fR | * ) ]
162 allow { \fIaddress_match_element\fR; \&.\&.\&. }
163 [ keys { \fIstring\fR; \&.\&.\&. } ];
164 unix \fIunsupported\fR; // not implemented
177 channel \fIstring\fR {
179 syslog \fIoptional_facility\fR;
182 severity \fIlog_severity\fR;
183 print\-time \fIboolean\fR;
184 print\-severity \fIboolean\fR;
185 print\-category \fIboolean\fR;
187 category \fIstring\fR { \fIstring\fR; \&.\&.\&. };
200 listen\-on [ port \fIinteger\fR ] {
201 ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; \&.\&.\&.
203 view \fIstring\fR \fIoptional_class\fR;
204 search { \fIstring\fR; \&.\&.\&. };
218 avoid\-v4\-udp\-ports { \fIport\fR; \&.\&.\&. };
219 avoid\-v6\-udp\-ports { \fIport\fR; \&.\&.\&. };
220 blackhole { \fIaddress_match_element\fR; \&.\&.\&. };
223 directory \fIquoted_string\fR;
224 dump\-file \fIquoted_string\fR;
226 heartbeat\-interval \fIinteger\fR;
227 host\-statistics \fIboolean\fR; // not implemented
228 host\-statistics\-max \fInumber\fR; // not implemented
229 hostname ( \fIquoted_string\fR | none );
230 interface\-interval \fIinteger\fR;
231 listen\-on [ port \fIinteger\fR ] { \fIaddress_match_element\fR; \&.\&.\&. };
232 listen\-on\-v6 [ port \fIinteger\fR ] { \fIaddress_match_element\fR; \&.\&.\&. };
233 match\-mapped\-addresses \fIboolean\fR;
234 memstatistics\-file \fIquoted_string\fR;
235 pid\-file ( \fIquoted_string\fR | none );
237 querylog \fIboolean\fR;
238 recursing\-file \fIquoted_string\fR;
239 reserved\-sockets \fIinteger\fR;
240 random\-device \fIquoted_string\fR;
241 recursive\-clients \fIinteger\fR;
242 serial\-query\-rate \fIinteger\fR;
243 server\-id ( \fIquoted_string\fR | hostname | none );
244 stacksize \fIsize\fR;
245 statistics\-file \fIquoted_string\fR;
246 statistics\-interval \fIinteger\fR; // not yet implemented
247 tcp\-clients \fIinteger\fR;
248 tcp\-listen\-queue \fIinteger\fR;
249 tkey\-dhkey \fIquoted_string\fR \fIinteger\fR;
250 tkey\-gssapi\-credential \fIquoted_string\fR;
251 tkey\-gssapi\-keytab \fIquoted_string\fR;
252 tkey\-domain \fIquoted_string\fR;
253 transfers\-per\-ns \fIinteger\fR;
254 transfers\-in \fIinteger\fR;
255 transfers\-out \fIinteger\fR;
256 version ( \fIquoted_string\fR | none );
257 allow\-recursion { \fIaddress_match_element\fR; \&.\&.\&. };
258 allow\-recursion\-on { \fIaddress_match_element\fR; \&.\&.\&. };
259 sortlist { \fIaddress_match_element\fR; \&.\&.\&. };
260 topology { \fIaddress_match_element\fR; \&.\&.\&. }; // not implemented
261 auth\-nxdomain \fIboolean\fR; // default changed
262 minimal\-responses \fIboolean\fR;
263 recursion \fIboolean\fR;
265 [ class \fIstring\fR ] [ type \fIstring\fR ]
266 [ name \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&.
268 provide\-ixfr \fIboolean\fR;
269 request\-ixfr \fIboolean\fR;
270 rfc2308\-type1 \fIboolean\fR; // not yet implemented
271 additional\-from\-auth \fIboolean\fR;
272 additional\-from\-cache \fIboolean\fR;
273 query\-source ( ( \fIipv4_address\fR | * ) | [ address ( \fIipv4_address\fR | * ) ] ) [ port ( \fIinteger\fR | * ) ];
274 query\-source\-v6 ( ( \fIipv6_address\fR | * ) | [ address ( \fIipv6_address\fR | * ) ] ) [ port ( \fIinteger\fR | * ) ];
275 use\-queryport\-pool \fIboolean\fR;
276 queryport\-pool\-ports \fIinteger\fR;
277 queryport\-pool\-updateinterval \fIinteger\fR;
278 cleaning\-interval \fIinteger\fR;
279 resolver\-query\-timeout \fIinteger\fR;
280 min\-roots \fIinteger\fR; // not implemented
281 lame\-ttl \fIinteger\fR;
282 max\-ncache\-ttl \fIinteger\fR;
283 max\-cache\-ttl \fIinteger\fR;
284 transfer\-format ( many\-answers | one\-answer );
285 max\-cache\-size \fIsize\fR;
286 max\-acache\-size \fIsize\fR;
287 clients\-per\-query \fInumber\fR;
288 max\-clients\-per\-query \fInumber\fR;
289 check\-names ( master | slave | response )
290 ( fail | warn | ignore );
291 check\-mx ( fail | warn | ignore );
292 check\-integrity \fIboolean\fR;
293 check\-mx\-cname ( fail | warn | ignore );
294 check\-srv\-cname ( fail | warn | ignore );
295 cache\-file \fIquoted_string\fR; // test option
296 suppress\-initial\-notify \fIboolean\fR; // not yet implemented
297 preferred\-glue \fIstring\fR;
298 dual\-stack\-servers [ port \fIinteger\fR ] {
299 ( \fIquoted_string\fR [port \fIinteger\fR] |
300 \fIipv4_address\fR [port \fIinteger\fR] |
301 \fIipv6_address\fR [port \fIinteger\fR] ); \&.\&.\&.
303 edns\-udp\-size \fIinteger\fR;
304 max\-udp\-size \fIinteger\fR;
305 root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ];
306 disable\-algorithms \fIstring\fR { \fIstring\fR; \&.\&.\&. };
307 dnssec\-enable \fIboolean\fR;
308 dnssec\-validation \fIboolean\fR;
309 dnssec\-lookaside ( \fIauto\fR | \fIno\fR | \fIdomain\fR trust\-anchor \fIdomain\fR );
310 dnssec\-must\-be\-secure \fIstring\fR \fIboolean\fR;
311 dnssec\-accept\-expired \fIboolean\fR;
312 dns64\-server \fIstring\fR;
313 dns64\-contact \fIstring\fR;
315 clients { <replacable>acl</replacable>; };
316 exclude { <replacable>acl</replacable>; };
317 mapped { <replacable>acl</replacable>; };
318 break\-dnssec \fIboolean\fR;
319 recursive\-only \fIboolean\fR;
320 suffix \fIipv6_address\fR;
322 empty\-server \fIstring\fR;
323 empty\-contact \fIstring\fR;
324 empty\-zones\-enable \fIboolean\fR;
325 disable\-empty\-zone \fIstring\fR;
326 dialup \fIdialuptype\fR;
327 ixfr\-from\-differences \fIixfrdiff\fR;
328 allow\-query { \fIaddress_match_element\fR; \&.\&.\&. };
329 allow\-query\-on { \fIaddress_match_element\fR; \&.\&.\&. };
330 allow\-query\-cache { \fIaddress_match_element\fR; \&.\&.\&. };
331 allow\-query\-cache\-on { \fIaddress_match_element\fR; \&.\&.\&. };
332 allow\-transfer { \fIaddress_match_element\fR; \&.\&.\&. };
333 allow\-update { \fIaddress_match_element\fR; \&.\&.\&. };
334 allow\-update\-forwarding { \fIaddress_match_element\fR; \&.\&.\&. };
335 update\-check\-ksk \fIboolean\fR;
336 dnssec\-dnskey\-kskonly \fIboolean\fR;
337 masterfile\-format ( text | raw );
338 notify \fInotifytype\fR;
339 notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
340 notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
341 notify\-delay \fIseconds\fR;
342 notify\-to\-soa \fIboolean\fR;
343 also\-notify [ port \fIinteger\fR ] { ( \fIipv4_address\fR | \fIipv6_address\fR )
344 [ port \fIinteger\fR ]; \&.\&.\&.
345 [ key \fIkeyname\fR ] \&.\&.\&. };
346 allow\-notify { \fIaddress_match_element\fR; \&.\&.\&. };
347 forward ( first | only );
348 forwarders [ port \fIinteger\fR ] {
349 ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; \&.\&.\&.
351 max\-journal\-size \fIsize_no_default\fR;
352 max\-transfer\-time\-in \fIinteger\fR;
353 max\-transfer\-time\-out \fIinteger\fR;
354 max\-transfer\-idle\-in \fIinteger\fR;
355 max\-transfer\-idle\-out \fIinteger\fR;
356 max\-retry\-time \fIinteger\fR;
357 min\-retry\-time \fIinteger\fR;
358 max\-refresh\-time \fIinteger\fR;
359 min\-refresh\-time \fIinteger\fR;
360 multi\-master \fIboolean\fR;
361 sig\-validity\-interval \fIinteger\fR;
362 sig\-re\-signing\-interval \fIinteger\fR;
363 sig\-signing\-nodes \fIinteger\fR;
364 sig\-signing\-signatures \fIinteger\fR;
365 sig\-signing\-type \fIinteger\fR;
366 transfer\-source ( \fIipv4_address\fR | * )
367 [ port ( \fIinteger\fR | * ) ];
368 transfer\-source\-v6 ( \fIipv6_address\fR | * )
369 [ port ( \fIinteger\fR | * ) ];
370 alt\-transfer\-source ( \fIipv4_address\fR | * )
371 [ port ( \fIinteger\fR | * ) ];
372 alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * )
373 [ port ( \fIinteger\fR | * ) ];
374 use\-alt\-transfer\-source \fIboolean\fR;
375 zone\-statistics \fIboolean\fR;
376 key\-directory \fIquoted_string\fR;
377 managed\-keys\-directory \fIquoted_string\fR;
378 auto\-dnssec \fBallow\fR|\fBmaintain\fR|\fBoff\fR;
379 try\-tcp\-refresh \fIboolean\fR;
380 zero\-no\-soa\-ttl \fIboolean\fR;
381 zero\-no\-soa\-ttl\-cache \fIboolean\fR;
382 dnssec\-secure\-to\-insecure \fIboolean\fR;
383 deny\-answer\-addresses {
384 \fIaddress_match_list\fR
385 } [ except\-from { \fInamelist\fR } ];
386 deny\-answer\-aliases {
388 } [ except\-from { \fInamelist\fR } ];
389 nsec3\-test\-zone \fIboolean\fR; // testing only
390 allow\-v6\-synthesis { \fIaddress_match_element\fR; \&.\&.\&. }; // obsolete
391 deallocate\-on\-exit \fIboolean\fR; // obsolete
392 fake\-iquery \fIboolean\fR; // obsolete
393 fetch\-glue \fIboolean\fR; // obsolete
394 has\-old\-clients \fIboolean\fR; // obsolete
395 maintain\-ixfr\-base \fIboolean\fR; // obsolete
396 max\-ixfr\-log\-size \fIsize\fR; // obsolete
397 multiple\-cnames \fIboolean\fR; // obsolete
398 named\-xfer \fIquoted_string\fR; // obsolete
399 serial\-queries \fIinteger\fR; // obsolete
400 treat\-cr\-as\-space \fIboolean\fR; // obsolete
401 use\-id\-pool \fIboolean\fR; // obsolete
402 use\-ixfr \fIboolean\fR; // obsolete
414 view \fIstring\fR \fIoptional_class\fR {
415 match\-clients { \fIaddress_match_element\fR; \&.\&.\&. };
416 match\-destinations { \fIaddress_match_element\fR; \&.\&.\&. };
417 match\-recursive\-only \fIboolean\fR;
419 algorithm \fIstring\fR;
422 zone \fIstring\fR \fIoptional_class\fR {
425 server ( \fIipv4_address\fR\fI[/prefixlen]\fR | \fIipv6_address\fR\fI[/prefixlen]\fR ) {
429 \fIstring\fR \fIinteger\fR \fIinteger\fR \fIinteger\fR \fIquoted_string\fR;
432 allow\-recursion { \fIaddress_match_element\fR; \&.\&.\&. };
433 allow\-recursion\-on { \fIaddress_match_element\fR; \&.\&.\&. };
434 sortlist { \fIaddress_match_element\fR; \&.\&.\&. };
435 topology { \fIaddress_match_element\fR; \&.\&.\&. }; // not implemented
436 auth\-nxdomain \fIboolean\fR; // default changed
437 minimal\-responses \fIboolean\fR;
438 recursion \fIboolean\fR;
440 [ class \fIstring\fR ] [ type \fIstring\fR ]
441 [ name \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&.
443 provide\-ixfr \fIboolean\fR;
444 request\-ixfr \fIboolean\fR;
445 rfc2308\-type1 \fIboolean\fR; // not yet implemented
446 additional\-from\-auth \fIboolean\fR;
447 additional\-from\-cache \fIboolean\fR;
448 query\-source ( ( \fIipv4_address\fR | * ) | [ address ( \fIipv4_address\fR | * ) ] ) [ port ( \fIinteger\fR | * ) ];
449 query\-source\-v6 ( ( \fIipv6_address\fR | * ) | [ address ( \fIipv6_address\fR | * ) ] ) [ port ( \fIinteger\fR | * ) ];
450 use\-queryport\-pool \fIboolean\fR;
451 queryport\-pool\-ports \fIinteger\fR;
452 queryport\-pool\-updateinterval \fIinteger\fR;
453 cleaning\-interval \fIinteger\fR;
454 resolver\-query\-timeout \fIinteger\fR;
455 min\-roots \fIinteger\fR; // not implemented
456 lame\-ttl \fIinteger\fR;
457 max\-ncache\-ttl \fIinteger\fR;
458 max\-cache\-ttl \fIinteger\fR;
459 transfer\-format ( many\-answers | one\-answer );
460 max\-cache\-size \fIsize\fR;
461 max\-acache\-size \fIsize\fR;
462 clients\-per\-query \fInumber\fR;
463 max\-clients\-per\-query \fInumber\fR;
464 check\-names ( master | slave | response )
465 ( fail | warn | ignore );
466 check\-mx ( fail | warn | ignore );
467 check\-integrity \fIboolean\fR;
468 check\-mx\-cname ( fail | warn | ignore );
469 check\-srv\-cname ( fail | warn | ignore );
470 cache\-file \fIquoted_string\fR; // test option
471 suppress\-initial\-notify \fIboolean\fR; // not yet implemented
472 preferred\-glue \fIstring\fR;
473 dual\-stack\-servers [ port \fIinteger\fR ] {
474 ( \fIquoted_string\fR [port \fIinteger\fR] |
475 \fIipv4_address\fR [port \fIinteger\fR] |
476 \fIipv6_address\fR [port \fIinteger\fR] ); \&.\&.\&.
478 edns\-udp\-size \fIinteger\fR;
479 max\-udp\-size \fIinteger\fR;
480 root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ];
481 disable\-algorithms \fIstring\fR { \fIstring\fR; \&.\&.\&. };
482 dnssec\-enable \fIboolean\fR;
483 dnssec\-validation \fIboolean\fR;
484 dnssec\-lookaside ( \fIauto\fR | \fIno\fR | \fIdomain\fR trust\-anchor \fIdomain\fR );
485 dnssec\-must\-be\-secure \fIstring\fR \fIboolean\fR;
486 dnssec\-accept\-expired \fIboolean\fR;
487 dns64\-server \fIstring\fR;
488 dns64\-contact \fIstring\fR;
490 clients { <replacable>acl</replacable>; };
491 exclude { <replacable>acl</replacable>; };
492 mapped { <replacable>acl</replacable>; };
493 break\-dnssec \fIboolean\fR;
494 recursive\-only \fIboolean\fR;
495 suffix \fIipv6_address\fR;
497 empty\-server \fIstring\fR;
498 empty\-contact \fIstring\fR;
499 empty\-zones\-enable \fIboolean\fR;
500 disable\-empty\-zone \fIstring\fR;
501 dialup \fIdialuptype\fR;
502 ixfr\-from\-differences \fIixfrdiff\fR;
503 allow\-query { \fIaddress_match_element\fR; \&.\&.\&. };
504 allow\-query\-on { \fIaddress_match_element\fR; \&.\&.\&. };
505 allow\-query\-cache { \fIaddress_match_element\fR; \&.\&.\&. };
506 allow\-query\-cache\-on { \fIaddress_match_element\fR; \&.\&.\&. };
507 allow\-transfer { \fIaddress_match_element\fR; \&.\&.\&. };
508 allow\-update { \fIaddress_match_element\fR; \&.\&.\&. };
509 allow\-update\-forwarding { \fIaddress_match_element\fR; \&.\&.\&. };
510 update\-check\-ksk \fIboolean\fR;
511 dnssec\-dnskey\-kskonly \fIboolean\fR;
512 masterfile\-format ( text | raw );
513 notify \fInotifytype\fR;
514 notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
515 notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
516 notify\-delay \fIseconds\fR;
517 notify\-to\-soa \fIboolean\fR;
518 also\-notify [ port \fIinteger\fR ] { ( \fIipv4_address\fR | \fIipv6_address\fR )
519 [ port \fIinteger\fR ]; \&.\&.\&.
520 [ key \fIkeyname\fR ] \&.\&.\&. };
521 allow\-notify { \fIaddress_match_element\fR; \&.\&.\&. };
522 forward ( first | only );
523 forwarders [ port \fIinteger\fR ] {
524 ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; \&.\&.\&.
526 max\-journal\-size \fIsize_no_default\fR;
527 max\-transfer\-time\-in \fIinteger\fR;
528 max\-transfer\-time\-out \fIinteger\fR;
529 max\-transfer\-idle\-in \fIinteger\fR;
530 max\-transfer\-idle\-out \fIinteger\fR;
531 max\-retry\-time \fIinteger\fR;
532 min\-retry\-time \fIinteger\fR;
533 max\-refresh\-time \fIinteger\fR;
534 min\-refresh\-time \fIinteger\fR;
535 multi\-master \fIboolean\fR;
536 sig\-validity\-interval \fIinteger\fR;
537 transfer\-source ( \fIipv4_address\fR | * )
538 [ port ( \fIinteger\fR | * ) ];
539 transfer\-source\-v6 ( \fIipv6_address\fR | * )
540 [ port ( \fIinteger\fR | * ) ];
541 alt\-transfer\-source ( \fIipv4_address\fR | * )
542 [ port ( \fIinteger\fR | * ) ];
543 alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * )
544 [ port ( \fIinteger\fR | * ) ];
545 use\-alt\-transfer\-source \fIboolean\fR;
546 zone\-statistics \fIboolean\fR;
547 try\-tcp\-refresh \fIboolean\fR;
548 key\-directory \fIquoted_string\fR;
549 zero\-no\-soa\-ttl \fIboolean\fR;
550 zero\-no\-soa\-ttl\-cache \fIboolean\fR;
551 dnssec\-secure\-to\-insecure \fIboolean\fR;
552 allow\-v6\-synthesis { \fIaddress_match_element\fR; \&.\&.\&. }; // obsolete
553 fetch\-glue \fIboolean\fR; // obsolete
554 maintain\-ixfr\-base \fIboolean\fR; // obsolete
555 max\-ixfr\-log\-size \fIsize\fR; // obsolete
567 zone \fIstring\fR \fIoptional_class\fR {
568 type ( master | slave | stub | hint | redirect |
569 forward | delegation\-only );
570 file \fIquoted_string\fR;
571 masters [ port \fIinteger\fR ] {
573 \fIipv4_address\fR [port \fIinteger\fR] |
574 \fIipv6_address\fR [ port \fIinteger\fR ] ) [ key \fIstring\fR ]; \&.\&.\&.
576 database \fIstring\fR;
577 delegation\-only \fIboolean\fR;
578 check\-names ( fail | warn | ignore );
579 check\-mx ( fail | warn | ignore );
580 check\-integrity \fIboolean\fR;
581 check\-mx\-cname ( fail | warn | ignore );
582 check\-srv\-cname ( fail | warn | ignore );
583 dialup \fIdialuptype\fR;
584 ixfr\-from\-differences \fIboolean\fR;
585 journal \fIquoted_string\fR;
586 zero\-no\-soa\-ttl \fIboolean\fR;
587 dnssec\-secure\-to\-insecure \fIboolean\fR;
588 allow\-query { \fIaddress_match_element\fR; \&.\&.\&. };
589 allow\-query\-on { \fIaddress_match_element\fR; \&.\&.\&. };
590 allow\-transfer { \fIaddress_match_element\fR; \&.\&.\&. };
591 allow\-update { \fIaddress_match_element\fR; \&.\&.\&. };
592 allow\-update\-forwarding { \fIaddress_match_element\fR; \&.\&.\&. };
593 update\-policy \fIlocal\fR | \fI {
594 ( grant | deny ) \fR\fI\fIstring\fR\fR\fI
595 ( name | subdomain | wildcard | self | selfsub | selfwild |
596 krb5\-self | ms\-self | krb5\-subdomain | ms\-subdomain |
597 tcp\-self | zonesub | 6to4\-self ) \fR\fI\fIstring\fR\fR\fI
598 \fR\fI\fIrrtypelist\fR\fR\fI;
599 \fR\fI[\&.\&.\&.]\fR\fI
601 update\-check\-ksk \fIboolean\fR;
602 dnssec\-dnskey\-kskonly \fIboolean\fR;
603 masterfile\-format ( text | raw );
604 notify \fInotifytype\fR;
605 notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
606 notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
607 notify\-delay \fIseconds\fR;
608 notify\-to\-soa \fIboolean\fR;
609 also\-notify [ port \fIinteger\fR ] { ( \fIipv4_address\fR | \fIipv6_address\fR )
610 [ port \fIinteger\fR ]; \&.\&.\&.
611 [ key \fIkeyname\fR ] \&.\&.\&. };
612 allow\-notify { \fIaddress_match_element\fR; \&.\&.\&. };
613 forward ( first | only );
614 forwarders [ port \fIinteger\fR ] {
615 ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; \&.\&.\&.
617 max\-journal\-size \fIsize_no_default\fR;
618 max\-transfer\-time\-in \fIinteger\fR;
619 max\-transfer\-time\-out \fIinteger\fR;
620 max\-transfer\-idle\-in \fIinteger\fR;
621 max\-transfer\-idle\-out \fIinteger\fR;
622 max\-retry\-time \fIinteger\fR;
623 min\-retry\-time \fIinteger\fR;
624 max\-refresh\-time \fIinteger\fR;
625 min\-refresh\-time \fIinteger\fR;
626 multi\-master \fIboolean\fR;
627 request\-ixfr \fIboolean\fR;
628 sig\-validity\-interval \fIinteger\fR;
629 transfer\-source ( \fIipv4_address\fR | * )
630 [ port ( \fIinteger\fR | * ) ];
631 transfer\-source\-v6 ( \fIipv6_address\fR | * )
632 [ port ( \fIinteger\fR | * ) ];
633 alt\-transfer\-source ( \fIipv4_address\fR | * )
634 [ port ( \fIinteger\fR | * ) ];
635 alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * )
636 [ port ( \fIinteger\fR | * ) ];
637 use\-alt\-transfer\-source \fIboolean\fR;
638 zone\-statistics \fIboolean\fR;
639 try\-tcp\-refresh \fIboolean\fR;
640 key\-directory \fIquoted_string\fR;
641 nsec3\-test\-zone \fIboolean\fR; // testing only
642 ixfr\-base \fIquoted_string\fR; // obsolete
643 ixfr\-tmp\-file \fIquoted_string\fR; // obsolete
644 maintain\-ixfr\-base \fIboolean\fR; // obsolete
645 max\-ixfr\-log\-size \fIsize\fR; // obsolete
646 pubkey \fIinteger\fR \fIinteger\fR \fIinteger\fR \fIquoted_string\fR; // obsolete
658 \fBnamed-checkconf\fR(8),
660 BIND 9 Administrator Reference Manual\&.
663 \fBInternet Systems Consortium, Inc\&.\fR
666 Copyright \(co 2004-2011, 2013-2015 Internet Systems Consortium, Inc. ("ISC")