contrib/bind9/bin/named/named.conf.docbook

   1 <!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.0//EN"
   2                "http://www.oasis-open.org/docbook/xml/4.0/docbookx.dtd"
   3                [<!ENTITY mdash "&#8212;">]>
   4 <!--
   5  - Copyright (C) 2004, 2005  Internet Systems Consortium, Inc. ("ISC")
   6  -
   7  - Permission to use, copy, modify, and distribute this software for any
   8  - purpose with or without fee is hereby granted, provided that the above
   9  - copyright notice and this permission notice appear in all copies.
  10  -
  11  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  12  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  13  - AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  14  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  15  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  16  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  17  - PERFORMANCE OF THIS SOFTWARE.
  18 -->
  19
  20 <!-- $Id: named.conf.docbook,v 1.1.4.4 2005/05/13 01:22:33 marka Exp $ -->
  21
  22 <refentry>
  23   <refentryinfo>
  24     <date>Aug 13, 2004</date>
  25   </refentryinfo>
  26
  27   <refmeta>
  28     <refentrytitle><filename>named.conf</filename></refentrytitle>
  29     <manvolnum>5</manvolnum>
  30     <refmiscinfo>BIND9</refmiscinfo>
  31   </refmeta>
  32
  33   <docinfo>
  34     <copyright>
  35       <year>2004</year>
  36       <year>2005</year>
  37       <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
  38     </copyright>
  39   </docinfo>
  40
  41   <refnamediv>
  42     <refname><filename>named.conf</filename></refname>
  43     <refpurpose>configuration file for named</refpurpose>
  44   </refnamediv>
  45
  46   <refsynopsisdiv>
  47     <cmdsynopsis>
  48       <command>named.conf</command>
  49     </cmdsynopsis>
  50   </refsynopsisdiv>
  51
  52   <refsect1>
  53     <title>DESCRIPTION</title>
  54     <para>
  55         <filename>named.conf</filename> is the configuration file for
  56         <command>named</command>.  Statements are enclosed
  57         in braces and terminated with a semi-colon.  Clauses in
  58         the statements are also semi-colon terminated.  The usual
  59         comment styles are supported:
  60     </para>
  61     <para>
  62         C style: /* */
  63     </para>
  64     <para>
  65         C++ style: // to end of line
  66     </para>
  67     <para>
  68         Unix style: # to end of line
  69     </para>
  70   </refsect1>
  71
  72 <refsect1>
  73 <title>ACL</title>
  74 <literallayout>
  75 acl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
  76
  77 </literallayout>
  78 </refsect1>
  79
  80 <refsect1>
  81 <title>KEY</title>
  82 <literallayout>
  83 key <replaceable>domain_name</replaceable> {
  84         algorithm <replaceable>string</replaceable>;
  85         secret <replaceable>string</replaceable>;
  86 };
  87 </literallayout>
  88 </refsect1>
  89
  90 <refsect1>
  91 <title>MASTERS</title>
  92 <literallayout>
  93 masters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
  94         ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
  95         <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
  96 };
  97 </literallayout>
  98 </refsect1>
  99
 100 <refsect1>
 101 <title>SERVER</title>
 102 <literallayout>
 103 server ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) {
 104         bogus <replaceable>boolean</replaceable>;
 105         edns <replaceable>boolean</replaceable>;
 106         provide-ixfr <replaceable>boolean</replaceable>;
 107         request-ixfr <replaceable>boolean</replaceable>;
 108         keys <replaceable>server_key</replaceable>;
 109         transfers <replaceable>integer</replaceable>;
 110         transfer-format ( many-answers | one-answer );
 111         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 112                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 113         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 114                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 115
 116         support-ixfr <replaceable>boolean</replaceable>; // obsolete
 117 };
 118 </literallayout>
 119 </refsect1>
 120
 121 <refsect1>
 122 <title>TRUSTED-KEYS</title>
 123 <literallayout>
 124 trusted-keys {
 125         <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
 126 };
 127 </literallayout>
 128 </refsect1>
 129
 130 <refsect1>
 131 <title>CONTROLS</title>
 132 <literallayout>
 133 controls {
 134         inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
 135                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
 136                 allow { <replaceable>address_match_element</replaceable>; ... }
 137                 <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
 138         unix <replaceable>unsupported</replaceable>; // not implemented
 139 };
 140 </literallayout>
 141 </refsect1>
 142
 143 <refsect1>
 144 <title>LOGGING</title>
 145 <literallayout>
 146 logging {
 147         channel <replaceable>string</replaceable> {
 148                 file <replaceable>log_file</replaceable>;
 149                 syslog <replaceable>optional_facility</replaceable>;
 150                 null;
 151                 stderr;
 152                 severity <replaceable>log_severity</replaceable>;
 153                 print-time <replaceable>boolean</replaceable>;
 154                 print-severity <replaceable>boolean</replaceable>;
 155                 print-category <replaceable>boolean</replaceable>;
 156         };
 157         category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 158 };
 159 </literallayout>
 160 </refsect1>
 161
 162 <refsect1>
 163 <title>LWRES</title>
 164 <literallayout>
 165 lwres {
 166         listen-on <optional> port <replaceable>integer</replaceable> </optional> {
 167                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 168         };
 169         view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
 170         search { <replaceable>string</replaceable>; ... };
 171         ndots <replaceable>integer</replaceable>;
 172 };
 173 </literallayout>
 174 </refsect1>
 175
 176 <refsect1>
 177 <title>OPTIONS</title>
 178 <literallayout>
 179 options {
 180         avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
 181         avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
 182         blackhole { <replaceable>address_match_element</replaceable>; ... };
 183         coresize <replaceable>size</replaceable>;
 184         datasize <replaceable>size</replaceable>;
 185         directory <replaceable>quoted_string</replaceable>;
 186         dump-file <replaceable>quoted_string</replaceable>;
 187         files <replaceable>size</replaceable>;
 188         heartbeat-interval <replaceable>integer</replaceable>;
 189         host-statistics <replaceable>boolean</replaceable>; // not implemented
 190         host-statistics-max <replaceable>number</replaceable>; // not implemented
 191         hostname ( <replaceable>quoted_string</replaceable> | none );
 192         interface-interval <replaceable>integer</replaceable>;
 193         listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
 194         listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
 195         match-mapped-addresses <replaceable>boolean</replaceable>;
 196         memstatistics-file <replaceable>quoted_string</replaceable>;
 197         pid-file ( <replaceable>quoted_string</replaceable> | none );
 198         port <replaceable>integer</replaceable>;
 199         querylog <replaceable>boolean</replaceable>;
 200         recursing-file <replaceable>quoted_string</replaceable>;
 201         random-device <replaceable>quoted_string</replaceable>;
 202         recursive-clients <replaceable>integer</replaceable>;
 203         serial-query-rate <replaceable>integer</replaceable>;
 204         server-id ( <replaceable>quoted_string</replaceable> | none |;
 205         stacksize <replaceable>size</replaceable>;
 206         statistics-file <replaceable>quoted_string</replaceable>;
 207         statistics-interval <replaceable>integer</replaceable>; // not yet implemented
 208         tcp-clients <replaceable>integer</replaceable>;
 209         tcp-listen-queue <replaceable>integer</replaceable>;
 210         tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
 211         tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
 212         tkey-domain <replaceable>quoted_string</replaceable>;
 213         transfers-per-ns <replaceable>integer</replaceable>;
 214         transfers-in <replaceable>integer</replaceable>;
 215         transfers-out <replaceable>integer</replaceable>;
 216         use-ixfr <replaceable>boolean</replaceable>;
 217         version ( <replaceable>quoted_string</replaceable> | none );
 218         allow-recursion { <replaceable>address_match_element</replaceable>; ... };
 219         sortlist { <replaceable>address_match_element</replaceable>; ... };
 220         topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
 221         auth-nxdomain <replaceable>boolean</replaceable>; // default changed
 222         minimal-responses <replaceable>boolean</replaceable>;
 223         recursion <replaceable>boolean</replaceable>;
 224         rrset-order {
 225                 <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
 226                 <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
 227         };
 228         provide-ixfr <replaceable>boolean</replaceable>;
 229         request-ixfr <replaceable>boolean</replaceable>;
 230         rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
 231         additional-from-auth <replaceable>boolean</replaceable>;
 232         additional-from-cache <replaceable>boolean</replaceable>;
 233         query-source <replaceable>querysource4</replaceable>;
 234         query-source-v6 <replaceable>querysource6</replaceable>;
 235         cleaning-interval <replaceable>integer</replaceable>;
 236         min-roots <replaceable>integer</replaceable>; // not implemented
 237         lame-ttl <replaceable>integer</replaceable>;
 238         max-ncache-ttl <replaceable>integer</replaceable>;
 239         max-cache-ttl <replaceable>integer</replaceable>;
 240         transfer-format ( many-answers | one-answer );
 241         max-cache-size <replaceable>size_no_default</replaceable>;
 242         check-names ( master | slave | response )
 243                 ( fail | warn | ignore );
 244         cache-file <replaceable>quoted_string</replaceable>;
 245         suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
 246         preferred-glue <replaceable>string</replaceable>;
 247         dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
 248                 ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 249                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 250                 <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
 251         }
 252         edns-udp-size <replaceable>integer</replaceable>;
 253         root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
 254         disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 255         dnssec-enable <replaceable>boolean</replaceable>;
 256         dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
 257         dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
 258
 259         dialup <replaceable>dialuptype</replaceable>;
 260         ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
 261
 262         allow-query { <replaceable>address_match_element</replaceable>; ... };
 263         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 264         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 265
 266         notify <replaceable>notifytype</replaceable>;
 267         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 268         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 269         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 270                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 271         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 272
 273         forward ( first | only );
 274         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 275                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 276         };
 277
 278         max-journal-size <replaceable>size_no_default</replaceable>;
 279         max-transfer-time-in <replaceable>integer</replaceable>;
 280         max-transfer-time-out <replaceable>integer</replaceable>;
 281         max-transfer-idle-in <replaceable>integer</replaceable>;
 282         max-transfer-idle-out <replaceable>integer</replaceable>;
 283         max-retry-time <replaceable>integer</replaceable>;
 284         min-retry-time <replaceable>integer</replaceable>;
 285         max-refresh-time <replaceable>integer</replaceable>;
 286         min-refresh-time <replaceable>integer</replaceable>;
 287         multi-master <replaceable>boolean</replaceable>;
 288         sig-validity-interval <replaceable>integer</replaceable>;
 289
 290         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 291                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 292         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 293                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 294
 295         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 296                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 297         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 298                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 299         use-alt-transfer-source <replaceable>boolean</replaceable>;
 300
 301         zone-statistics <replaceable>boolean</replaceable>;
 302         key-directory <replaceable>quoted_string</replaceable>;
 303
 304         allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
 305         deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
 306         fake-iquery <replaceable>boolean</replaceable>; // obsolete
 307         fetch-glue <replaceable>boolean</replaceable>; // obsolete
 308         has-old-clients <replaceable>boolean</replaceable>; // obsolete
 309         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 310         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 311         multiple-cnames <replaceable>boolean</replaceable>; // obsolete
 312         named-xfer <replaceable>quoted_string</replaceable>; // obsolete
 313         serial-queries <replaceable>integer</replaceable>; // obsolete
 314         treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
 315         use-id-pool <replaceable>boolean</replaceable>; // obsolete
 316 };
 317 </literallayout>
 318 </refsect1>
 319
 320 <refsect1>
 321 <title>VIEW</title>
 322 <literallayout>
 323 view <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 324         match-clients { <replaceable>address_match_element</replaceable>; ... };
 325         match-destinations { <replaceable>address_match_element</replaceable>; ... };
 326         match-recursive-only <replaceable>boolean</replaceable>;
 327
 328         key <replaceable>string</replaceable> {
 329                 algorithm <replaceable>string</replaceable>;
 330                 secret <replaceable>string</replaceable>;
 331         };
 332
 333         zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 334                 ...
 335         };
 336
 337         server ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) {
 338                 ...
 339         };
 340
 341         trusted-keys {
 342                 <replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; ...
 343         };
 344
 345         allow-recursion { <replaceable>address_match_element</replaceable>; ... };
 346         sortlist { <replaceable>address_match_element</replaceable>; ... };
 347         topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
 348         auth-nxdomain <replaceable>boolean</replaceable>; // default changed
 349         minimal-responses <replaceable>boolean</replaceable>;
 350         recursion <replaceable>boolean</replaceable>;
 351         rrset-order {
 352                 <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
 353                 <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
 354         };
 355         provide-ixfr <replaceable>boolean</replaceable>;
 356         request-ixfr <replaceable>boolean</replaceable>;
 357         rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
 358         additional-from-auth <replaceable>boolean</replaceable>;
 359         additional-from-cache <replaceable>boolean</replaceable>;
 360         query-source <replaceable>querysource4</replaceable>;
 361         query-source-v6 <replaceable>querysource6</replaceable>;
 362         cleaning-interval <replaceable>integer</replaceable>;
 363         min-roots <replaceable>integer</replaceable>; // not implemented
 364         lame-ttl <replaceable>integer</replaceable>;
 365         max-ncache-ttl <replaceable>integer</replaceable>;
 366         max-cache-ttl <replaceable>integer</replaceable>;
 367         transfer-format ( many-answers | one-answer );
 368         max-cache-size <replaceable>size_no_default</replaceable>;
 369         check-names ( master | slave | response )
 370                 ( fail | warn | ignore );
 371         cache-file <replaceable>quoted_string</replaceable>;
 372         suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
 373         preferred-glue <replaceable>string</replaceable>;
 374         dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
 375                 ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 376                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 377                 <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
 378         };
 379         edns-udp-size <replaceable>integer</replaceable>;
 380         root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
 381         disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 382         dnssec-enable <replaceable>boolean</replaceable>;
 383         dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
 384
 385         dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
 386         dialup <replaceable>dialuptype</replaceable>;
 387         ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
 388
 389         allow-query { <replaceable>address_match_element</replaceable>; ... };
 390         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 391         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 392
 393         notify <replaceable>notifytype</replaceable>;
 394         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 395         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 396         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 397                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 398         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 399
 400         forward ( first | only );
 401         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 402                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 403         };
 404
 405         max-journal-size <replaceable>size_no_default</replaceable>;
 406         max-transfer-time-in <replaceable>integer</replaceable>;
 407         max-transfer-time-out <replaceable>integer</replaceable>;
 408         max-transfer-idle-in <replaceable>integer</replaceable>;
 409         max-transfer-idle-out <replaceable>integer</replaceable>;
 410         max-retry-time <replaceable>integer</replaceable>;
 411         min-retry-time <replaceable>integer</replaceable>;
 412         max-refresh-time <replaceable>integer</replaceable>;
 413         min-refresh-time <replaceable>integer</replaceable>;
 414         multi-master <replaceable>boolean</replaceable>;
 415         sig-validity-interval <replaceable>integer</replaceable>;
 416
 417         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 418                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 419         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 420                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 421
 422         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 423                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 424         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 425                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 426         use-alt-transfer-source <replaceable>boolean</replaceable>;
 427
 428         zone-statistics <replaceable>boolean</replaceable>;
 429         key-directory <replaceable>quoted_string</replaceable>;
 430
 431         allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
 432         fetch-glue <replaceable>boolean</replaceable>; // obsolete
 433         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 434         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 435 };
 436 </literallayout>
 437 </refsect1>
 438
 439 <refsect1>
 440 <title>ZONE</title>
 441 <literallayout>
 442 zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 443         type ( master | slave | stub | hint |
 444                 forward | delegation-only );
 445         file <replaceable>quoted_string</replaceable>;
 446
 447         masters <optional> port <replaceable>integer</replaceable> </optional> {
 448                 ( <replaceable>masters</replaceable> |
 449                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 450                 <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
 451         };
 452
 453         database <replaceable>string</replaceable>;
 454         delegation-only <replaceable>boolean</replaceable>;
 455         check-names ( fail | warn | ignore );
 456         dialup <replaceable>dialuptype</replaceable>;
 457         ixfr-from-differences <replaceable>boolean</replaceable>;
 458
 459         allow-query { <replaceable>address_match_element</replaceable>; ... };
 460         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 461         allow-update { <replaceable>address_match_element</replaceable>; ... };
 462         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 463         update-policy {
 464                 ( grant | deny ) <replaceable>string</replaceable>
 465                 ( name | subdomain | wildcard | self ) <replaceable>string</replaceable>
 466                 <replaceable>rrtypelist</replaceable>; ...
 467         };
 468
 469         notify <replaceable>notifytype</replaceable>;
 470         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 471         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 472         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 473                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 474         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 475
 476         forward ( first | only );
 477         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 478                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 479         };
 480
 481         max-journal-size <replaceable>size_no_default</replaceable>;
 482         max-transfer-time-in <replaceable>integer</replaceable>;
 483         max-transfer-time-out <replaceable>integer</replaceable>;
 484         max-transfer-idle-in <replaceable>integer</replaceable>;
 485         max-transfer-idle-out <replaceable>integer</replaceable>;
 486         max-retry-time <replaceable>integer</replaceable>;
 487         min-retry-time <replaceable>integer</replaceable>;
 488         max-refresh-time <replaceable>integer</replaceable>;
 489         min-refresh-time <replaceable>integer</replaceable>;
 490         multi-master <replaceable>boolean</replaceable>;
 491         sig-validity-interval <replaceable>integer</replaceable>;
 492
 493         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 494                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 495         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 496                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 497
 498         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 499                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 500         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 501                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 502         use-alt-transfer-source <replaceable>boolean</replaceable>;
 503
 504         zone-statistics <replaceable>boolean</replaceable>;
 505         key-directory <replaceable>quoted_string</replaceable>;
 506
 507         ixfr-base <replaceable>quoted_string</replaceable>; // obsolete
 508         ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete
 509         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 510         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 511         pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete
 512 };
 513 </literallayout>
 514 </refsect1>
 515
 516 <refsect1>
 517 <title>FILES</title>
 518 <para>
 519 <filename>/etc/named.conf</filename>
 520 </para>
 521 </refsect1>
 522
 523 <refsect1>
 524 <title>SEE ALSO</title>
 525 <para>
 526 <citerefentry>
 527 <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
 528 </citerefentry>,
 529 <citerefentry>
 530 <refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>
 531 </citerefentry>,
 532 <citerefentry>
 533 <refentrytitle>BIND 9 Adminstrators Reference Manual</refentrytitle>
 534 </citerefentry>.
 535 </para>
 536 </refsect1>
 537
 538 </refentry>
 539 <!--
 540  - Local variables:
 541  - mode: sgml
 542  - End:
 543 -->