contrib/bind9/bin/named/named.conf.docbook

   1 <!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
   2                "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
   3                [<!ENTITY mdash "&#8212;">]>
   4 <!--
   5  - Copyright (C) 2004-2008  Internet Systems Consortium, Inc. ("ISC")
   6  -
   7  - Permission to use, copy, modify, and/or distribute this software for any
   8  - purpose with or without fee is hereby granted, provided that the above
   9  - copyright notice and this permission notice appear in all copies.
  10  -
  11  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  12  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  13  - AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  14  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  15  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  16  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  17  - PERFORMANCE OF THIS SOFTWARE.
  18 -->
  19
  20 <!-- $Id: named.conf.docbook,v 1.1.4.13.4.2 2008/07/23 23:47:49 tbox Exp $ -->
  21
  22 <refentry>
  23   <refentryinfo>
  24     <date>Aug 13, 2004</date>
  25   </refentryinfo>
  26
  27   <refmeta>
  28     <refentrytitle><filename>named.conf</filename></refentrytitle>
  29     <manvolnum>5</manvolnum>
  30     <refmiscinfo>BIND9</refmiscinfo>
  31   </refmeta>
  32
  33   <docinfo>
  34     <copyright>
  35       <year>2004</year>
  36       <year>2005</year>
  37       <year>2006</year>
  38       <year>2007</year>
  39       <year>2008</year>
  40       <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
  41     </copyright>
  42   </docinfo>
  43
  44   <refnamediv>
  45     <refname><filename>named.conf</filename></refname>
  46     <refpurpose>configuration file for named</refpurpose>
  47   </refnamediv>
  48
  49   <refsynopsisdiv>
  50     <cmdsynopsis>
  51       <command>named.conf</command>
  52     </cmdsynopsis>
  53   </refsynopsisdiv>
  54
  55   <refsect1>
  56     <title>DESCRIPTION</title>
  57     <para>
  58         <filename>named.conf</filename> is the configuration file for
  59         <command>named</command>.  Statements are enclosed
  60         in braces and terminated with a semi-colon.  Clauses in
  61         the statements are also semi-colon terminated.  The usual
  62         comment styles are supported:
  63     </para>
  64     <para>
  65         C style: /* */
  66     </para>
  67     <para>
  68         C++ style: // to end of line
  69     </para>
  70     <para>
  71         Unix style: # to end of line
  72     </para>
  73   </refsect1>
  74
  75 <refsect1>
  76 <title>ACL</title>
  77 <literallayout>
  78 acl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
  79
  80 </literallayout>
  81 </refsect1>
  82
  83 <refsect1>
  84 <title>KEY</title>
  85 <literallayout>
  86 key <replaceable>domain_name</replaceable> {
  87         algorithm <replaceable>string</replaceable>;
  88         secret <replaceable>string</replaceable>;
  89 };
  90 </literallayout>
  91 </refsect1>
  92
  93 <refsect1>
  94 <title>MASTERS</title>
  95 <literallayout>
  96 masters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
  97         ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
  98         <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
  99 };
 100 </literallayout>
 101 </refsect1>
 102
 103 <refsect1>
 104 <title>SERVER</title>
 105 <literallayout>
 106 server ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) {
 107         bogus <replaceable>boolean</replaceable>;
 108         edns <replaceable>boolean</replaceable>;
 109         provide-ixfr <replaceable>boolean</replaceable>;
 110         request-ixfr <replaceable>boolean</replaceable>;
 111         keys <replaceable>server_key</replaceable>;
 112         transfers <replaceable>integer</replaceable>;
 113         transfer-format ( many-answers | one-answer );
 114         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 115                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 116         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 117                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 118
 119         support-ixfr <replaceable>boolean</replaceable>; // obsolete
 120 };
 121 </literallayout>
 122 </refsect1>
 123
 124 <refsect1>
 125 <title>TRUSTED-KEYS</title>
 126 <literallayout>
 127 trusted-keys {
 128         <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
 129 };
 130 </literallayout>
 131 </refsect1>
 132
 133 <refsect1>
 134 <title>CONTROLS</title>
 135 <literallayout>
 136 controls {
 137         inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
 138                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
 139                 allow { <replaceable>address_match_element</replaceable>; ... }
 140                 <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
 141         unix <replaceable>unsupported</replaceable>; // not implemented
 142 };
 143 </literallayout>
 144 </refsect1>
 145
 146 <refsect1>
 147 <title>LOGGING</title>
 148 <literallayout>
 149 logging {
 150         channel <replaceable>string</replaceable> {
 151                 file <replaceable>log_file</replaceable>;
 152                 syslog <replaceable>optional_facility</replaceable>;
 153                 null;
 154                 stderr;
 155                 severity <replaceable>log_severity</replaceable>;
 156                 print-time <replaceable>boolean</replaceable>;
 157                 print-severity <replaceable>boolean</replaceable>;
 158                 print-category <replaceable>boolean</replaceable>;
 159         };
 160         category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 161 };
 162 </literallayout>
 163 </refsect1>
 164
 165 <refsect1>
 166 <title>LWRES</title>
 167 <literallayout>
 168 lwres {
 169         listen-on <optional> port <replaceable>integer</replaceable> </optional> {
 170                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 171         };
 172         view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
 173         search { <replaceable>string</replaceable>; ... };
 174         ndots <replaceable>integer</replaceable>;
 175 };
 176 </literallayout>
 177 </refsect1>
 178
 179 <refsect1>
 180 <title>OPTIONS</title>
 181 <literallayout>
 182 options {
 183         avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
 184         avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
 185         blackhole { <replaceable>address_match_element</replaceable>; ... };
 186         coresize <replaceable>size</replaceable>;
 187         datasize <replaceable>size</replaceable>;
 188         directory <replaceable>quoted_string</replaceable>;
 189         cache-file <replaceable>quoted_string</replaceable>; // test option
 190         dump-file <replaceable>quoted_string</replaceable>;
 191         files <replaceable>size</replaceable>;
 192         heartbeat-interval <replaceable>integer</replaceable>;
 193         host-statistics <replaceable>boolean</replaceable>; // not implemented
 194         host-statistics-max <replaceable>number</replaceable>; // not implemented
 195         hostname ( <replaceable>quoted_string</replaceable> | none );
 196         interface-interval <replaceable>integer</replaceable>;
 197         listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
 198         listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
 199         match-mapped-addresses <replaceable>boolean</replaceable>;
 200         memstatistics-file <replaceable>quoted_string</replaceable>;
 201         pid-file ( <replaceable>quoted_string</replaceable> | none );
 202         port <replaceable>integer</replaceable>;
 203         querylog <replaceable>boolean</replaceable>;
 204         recursing-file <replaceable>quoted_string</replaceable>;
 205         reserved-sockets <replaceable>integer</replaceable>;
 206         random-device <replaceable>quoted_string</replaceable>;
 207         recursive-clients <replaceable>integer</replaceable>;
 208         serial-query-rate <replaceable>integer</replaceable>;
 209         server-id ( <replaceable>quoted_string</replaceable> | none |;
 210         stacksize <replaceable>size</replaceable>;
 211         statistics-file <replaceable>quoted_string</replaceable>;
 212         statistics-interval <replaceable>integer</replaceable>; // not yet implemented
 213         tcp-clients <replaceable>integer</replaceable>;
 214         tcp-listen-queue <replaceable>integer</replaceable>;
 215         tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
 216         tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
 217         tkey-domain <replaceable>quoted_string</replaceable>;
 218         transfers-per-ns <replaceable>integer</replaceable>;
 219         transfers-in <replaceable>integer</replaceable>;
 220         transfers-out <replaceable>integer</replaceable>;
 221         use-ixfr <replaceable>boolean</replaceable>;
 222         version ( <replaceable>quoted_string</replaceable> | none );
 223         allow-recursion { <replaceable>address_match_element</replaceable>; ... };
 224         sortlist { <replaceable>address_match_element</replaceable>; ... };
 225         topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
 226         auth-nxdomain <replaceable>boolean</replaceable>; // default changed
 227         minimal-responses <replaceable>boolean</replaceable>;
 228         recursion <replaceable>boolean</replaceable>;
 229         rrset-order {
 230                 <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
 231                 <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
 232         };
 233         provide-ixfr <replaceable>boolean</replaceable>;
 234         request-ixfr <replaceable>boolean</replaceable>;
 235         rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
 236         additional-from-auth <replaceable>boolean</replaceable>;
 237         additional-from-cache <replaceable>boolean</replaceable>;
 238         query-source <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 239         query-source-v6 <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 240         cleaning-interval <replaceable>integer</replaceable>;
 241         min-roots <replaceable>integer</replaceable>; // not implemented
 242         lame-ttl <replaceable>integer</replaceable>;
 243         max-ncache-ttl <replaceable>integer</replaceable>;
 244         max-cache-ttl <replaceable>integer</replaceable>;
 245         transfer-format ( many-answers | one-answer );
 246         max-cache-size <replaceable>size_no_default</replaceable>;
 247         check-names ( master | slave | response )
 248                 ( fail | warn | ignore );
 249         cache-file <replaceable>quoted_string</replaceable>;
 250         suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
 251         preferred-glue <replaceable>string</replaceable>;
 252         dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
 253                 ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 254                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 255                 <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
 256         }
 257         edns-udp-size <replaceable>integer</replaceable>;
 258         root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
 259         disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 260         dnssec-enable <replaceable>boolean</replaceable>;
 261         dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
 262         dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
 263
 264         dialup <replaceable>dialuptype</replaceable>;
 265         ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
 266
 267         allow-query { <replaceable>address_match_element</replaceable>; ... };
 268         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 269         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 270
 271         notify <replaceable>notifytype</replaceable>;
 272         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 273         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 274         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 275                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 276         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 277
 278         forward ( first | only );
 279         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 280                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 281         };
 282
 283         max-journal-size <replaceable>size_no_default</replaceable>;
 284         max-transfer-time-in <replaceable>integer</replaceable>;
 285         max-transfer-time-out <replaceable>integer</replaceable>;
 286         max-transfer-idle-in <replaceable>integer</replaceable>;
 287         max-transfer-idle-out <replaceable>integer</replaceable>;
 288         max-retry-time <replaceable>integer</replaceable>;
 289         min-retry-time <replaceable>integer</replaceable>;
 290         max-refresh-time <replaceable>integer</replaceable>;
 291         min-refresh-time <replaceable>integer</replaceable>;
 292         multi-master <replaceable>boolean</replaceable>;
 293         sig-validity-interval <replaceable>integer</replaceable>;
 294
 295         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 296                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 297         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 298                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 299
 300         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 301                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 302         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 303                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 304         use-alt-transfer-source <replaceable>boolean</replaceable>;
 305
 306         zone-statistics <replaceable>boolean</replaceable>;
 307         key-directory <replaceable>quoted_string</replaceable>;
 308
 309         allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
 310         deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
 311         fake-iquery <replaceable>boolean</replaceable>; // obsolete
 312         fetch-glue <replaceable>boolean</replaceable>; // obsolete
 313         has-old-clients <replaceable>boolean</replaceable>; // obsolete
 314         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 315         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 316         multiple-cnames <replaceable>boolean</replaceable>; // obsolete
 317         named-xfer <replaceable>quoted_string</replaceable>; // obsolete
 318         serial-queries <replaceable>integer</replaceable>; // obsolete
 319         treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
 320         use-id-pool <replaceable>boolean</replaceable>; // obsolete
 321 };
 322 </literallayout>
 323 </refsect1>
 324
 325 <refsect1>
 326 <title>VIEW</title>
 327 <literallayout>
 328 view <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 329         match-clients { <replaceable>address_match_element</replaceable>; ... };
 330         match-destinations { <replaceable>address_match_element</replaceable>; ... };
 331         match-recursive-only <replaceable>boolean</replaceable>;
 332
 333         key <replaceable>string</replaceable> {
 334                 algorithm <replaceable>string</replaceable>;
 335                 secret <replaceable>string</replaceable>;
 336         };
 337
 338         zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 339                 ...
 340         };
 341
 342         server ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) {
 343                 ...
 344         };
 345
 346         trusted-keys {
 347                 <replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; ...
 348         };
 349
 350         allow-recursion { <replaceable>address_match_element</replaceable>; ... };
 351         sortlist { <replaceable>address_match_element</replaceable>; ... };
 352         topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
 353         auth-nxdomain <replaceable>boolean</replaceable>; // default changed
 354         minimal-responses <replaceable>boolean</replaceable>;
 355         recursion <replaceable>boolean</replaceable>;
 356         rrset-order {
 357                 <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
 358                 <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
 359         };
 360         provide-ixfr <replaceable>boolean</replaceable>;
 361         request-ixfr <replaceable>boolean</replaceable>;
 362         rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
 363         additional-from-auth <replaceable>boolean</replaceable>;
 364         additional-from-cache <replaceable>boolean</replaceable>;
 365         query-source <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 366         query-source-v6 <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 367         cleaning-interval <replaceable>integer</replaceable>;
 368         min-roots <replaceable>integer</replaceable>; // not implemented
 369         lame-ttl <replaceable>integer</replaceable>;
 370         max-ncache-ttl <replaceable>integer</replaceable>;
 371         max-cache-ttl <replaceable>integer</replaceable>;
 372         transfer-format ( many-answers | one-answer );
 373         max-cache-size <replaceable>size_no_default</replaceable>;
 374         check-names ( master | slave | response )
 375                 ( fail | warn | ignore );
 376         cache-file <replaceable>quoted_string</replaceable>;
 377         suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
 378         preferred-glue <replaceable>string</replaceable>;
 379         dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
 380                 ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 381                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 382                 <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
 383         };
 384         edns-udp-size <replaceable>integer</replaceable>;
 385         root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
 386         disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 387         dnssec-enable <replaceable>boolean</replaceable>;
 388         dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
 389
 390         dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
 391         dialup <replaceable>dialuptype</replaceable>;
 392         ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
 393
 394         allow-query { <replaceable>address_match_element</replaceable>; ... };
 395         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 396         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 397
 398         notify <replaceable>notifytype</replaceable>;
 399         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 400         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 401         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 402                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 403         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 404
 405         forward ( first | only );
 406         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 407                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 408         };
 409
 410         max-journal-size <replaceable>size_no_default</replaceable>;
 411         max-transfer-time-in <replaceable>integer</replaceable>;
 412         max-transfer-time-out <replaceable>integer</replaceable>;
 413         max-transfer-idle-in <replaceable>integer</replaceable>;
 414         max-transfer-idle-out <replaceable>integer</replaceable>;
 415         max-retry-time <replaceable>integer</replaceable>;
 416         min-retry-time <replaceable>integer</replaceable>;
 417         max-refresh-time <replaceable>integer</replaceable>;
 418         min-refresh-time <replaceable>integer</replaceable>;
 419         multi-master <replaceable>boolean</replaceable>;
 420         sig-validity-interval <replaceable>integer</replaceable>;
 421
 422         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 423                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 424         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 425                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 426
 427         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 428                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 429         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 430                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 431         use-alt-transfer-source <replaceable>boolean</replaceable>;
 432
 433         zone-statistics <replaceable>boolean</replaceable>;
 434         key-directory <replaceable>quoted_string</replaceable>;
 435
 436         allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
 437         fetch-glue <replaceable>boolean</replaceable>; // obsolete
 438         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 439         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 440 };
 441 </literallayout>
 442 </refsect1>
 443
 444 <refsect1>
 445 <title>ZONE</title>
 446 <literallayout>
 447 zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 448         type ( master | slave | stub | hint |
 449                 forward | delegation-only );
 450         file <replaceable>quoted_string</replaceable>;
 451
 452         masters <optional> port <replaceable>integer</replaceable> </optional> {
 453                 ( <replaceable>masters</replaceable> |
 454                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 455                 <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
 456         };
 457
 458         database <replaceable>string</replaceable>;
 459         delegation-only <replaceable>boolean</replaceable>;
 460         check-names ( fail | warn | ignore );
 461         dialup <replaceable>dialuptype</replaceable>;
 462         ixfr-from-differences <replaceable>boolean</replaceable>;
 463
 464         allow-query { <replaceable>address_match_element</replaceable>; ... };
 465         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 466         allow-update { <replaceable>address_match_element</replaceable>; ... };
 467         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 468         update-policy {
 469                 ( grant | deny ) <replaceable>string</replaceable>
 470                 ( name | subdomain | wildcard | self ) <replaceable>string</replaceable>
 471                 <replaceable>rrtypelist</replaceable>; ...
 472         };
 473
 474         notify <replaceable>notifytype</replaceable>;
 475         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 476         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 477         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 478                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 479         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 480
 481         forward ( first | only );
 482         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 483                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 484         };
 485
 486         max-journal-size <replaceable>size_no_default</replaceable>;
 487         max-transfer-time-in <replaceable>integer</replaceable>;
 488         max-transfer-time-out <replaceable>integer</replaceable>;
 489         max-transfer-idle-in <replaceable>integer</replaceable>;
 490         max-transfer-idle-out <replaceable>integer</replaceable>;
 491         max-retry-time <replaceable>integer</replaceable>;
 492         min-retry-time <replaceable>integer</replaceable>;
 493         max-refresh-time <replaceable>integer</replaceable>;
 494         min-refresh-time <replaceable>integer</replaceable>;
 495         multi-master <replaceable>boolean</replaceable>;
 496         sig-validity-interval <replaceable>integer</replaceable>;
 497
 498         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 499                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 500         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 501                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 502
 503         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 504                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 505         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 506                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 507         use-alt-transfer-source <replaceable>boolean</replaceable>;
 508
 509         zone-statistics <replaceable>boolean</replaceable>;
 510         key-directory <replaceable>quoted_string</replaceable>;
 511
 512         ixfr-base <replaceable>quoted_string</replaceable>; // obsolete
 513         ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete
 514         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 515         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 516         pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete
 517 };
 518 </literallayout>
 519 </refsect1>
 520
 521 <refsect1>
 522 <title>FILES</title>
 523 <para>
 524 <filename>/etc/named.conf</filename>
 525 </para>
 526 </refsect1>
 527
 528     <refsect1>
 529       <title>SEE ALSO</title>
 530       <para>
 531         <citerefentry>
 532           <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
 533         </citerefentry>,
 534         <citerefentry>
 535           <refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>
 536         </citerefentry>,
 537         <citerefentry>
 538           <refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>
 539         </citerefentry>,
 540         <citetitle>BIND 9 Administrator Reference Manual</citetitle>
 541       </para>
 542     </refsect1>
 543
 544 </refentry>
 545 <!--
 546  - Local variables:
 547  - mode: sgml
 548  - End:
 549 -->