2 This is a summary of the named.conf options supported by
3 this version of BIND 9.
5 acl <string> { <address_match_element>; ... };
8 inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
9 ) ] allow { <address_match_element>; ... } [ keys { <string>;
11 unix <quoted_string> perm <integer> owner <integer> group <integer>
12 [ keys { <string>; ... } ];
25 category <string> { <string>; ... };
27 file <quoted_string> [ versions ( "unlimited" | <integer> )
30 print-category <boolean>;
31 print-severity <boolean>;
33 severity <log_severity>;
35 syslog <optional_facility>;
40 listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
41 [ port <integer> ]; ... };
43 search { <string>; ... };
44 view <string> <optional_class>;
47 managed-keys { <string> <string> <integer> <integer> <integer>
48 <quoted_string>; ... };
50 masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port
51 <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };
54 acache-cleaning-interval <integer>;
55 acache-enable <boolean>;
56 additional-from-auth <boolean>;
57 additional-from-cache <boolean>;
58 allow-new-zones <boolean>;
59 allow-notify { <address_match_element>; ... };
60 allow-query { <address_match_element>; ... };
61 allow-query-cache { <address_match_element>; ... };
62 allow-query-cache-on { <address_match_element>; ... };
63 allow-query-on { <address_match_element>; ... };
64 allow-recursion { <address_match_element>; ... };
65 allow-recursion-on { <address_match_element>; ... };
66 allow-transfer { <address_match_element>; ... };
67 allow-update { <address_match_element>; ... };
68 allow-update-forwarding { <address_match_element>; ... };
69 allow-v6-synthesis { <address_match_element>; ... }; // obsolete
70 also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
71 ) [ port <integer> ]; ... };
72 alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
73 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
75 attach-cache <string>;
76 auth-nxdomain <boolean>; // default changed
77 auto-dnssec ( allow | maintain | off );
78 avoid-v4-udp-ports { <portrange>; ... };
79 avoid-v6-udp-ports { <portrange>; ... };
80 bindkeys-file <quoted_string>;
81 blackhole { <address_match_element>; ... };
82 cache-file <quoted_string>;
83 check-dup-records ( fail | warn | ignore );
84 check-integrity <boolean>;
85 check-mx ( fail | warn | ignore );
86 check-mx-cname ( fail | warn | ignore );
87 check-names ( master | slave | response ) ( fail | warn | ignore );
88 check-sibling <boolean>;
89 check-srv-cname ( fail | warn | ignore );
90 check-wildcard <boolean>;
91 cleaning-interval <integer>;
92 clients-per-query <integer>;
95 deallocate-on-exit <boolean>; // obsolete
96 deny-answer-addresses { <address_match_element>; ... } [
97 except-from { <quoted_string>; ... } ];
98 deny-answer-aliases { <quoted_string>; ... } [ except-from {
99 <quoted_string>; ... } ];
101 directory <quoted_string>;
102 disable-algorithms <string> { <string>; ... };
103 disable-empty-zone <string>;
105 break-dnssec <boolean>;
106 clients { <address_match_element>; ... };
107 exclude { <address_match_element>; ... };
108 mapped { <address_match_element>; ... };
109 recursive-only <boolean>;
110 suffix <ipv6_address>;
112 dns64-contact <string>;
113 dns64-server <string>;
114 dnssec-accept-expired <boolean>;
115 dnssec-dnskey-kskonly <boolean>;
116 dnssec-enable <boolean>;
117 dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
118 dnssec-must-be-secure <string> <boolean>;
119 dnssec-secure-to-insecure <boolean>;
120 dnssec-validation ( yes | no | auto );
121 dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
122 <integer> ] | <ipv4_address> [ port <integer> ] |
123 <ipv6_address> [ port <integer> ] ); ... };
124 dump-file <quoted_string>;
125 edns-udp-size <integer>;
126 empty-contact <string>;
127 empty-server <string>;
128 empty-zones-enable <boolean>;
129 fake-iquery <boolean>; // obsolete
130 fetch-glue <boolean>; // obsolete
132 filter-aaaa { <address_match_element>; ... }; // not configured
133 filter-aaaa-on-v4 <v4_aaaa>; // not configured
134 flush-zones-on-shutdown <boolean>;
135 forward ( first | only );
136 forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
137 [ port <integer> ]; ... };
138 has-old-clients <boolean>; // obsolete
139 heartbeat-interval <integer>;
140 host-statistics <boolean>; // not implemented
141 host-statistics-max <integer>; // not implemented
142 hostname ( <quoted_string> | none );
143 interface-interval <integer>;
144 ixfr-from-differences <ixfrdiff>;
145 key-directory <quoted_string>;
147 listen-on [ port <integer> ] { <address_match_element>; ... };
148 listen-on-v6 [ port <integer> ] { <address_match_element>; ... };
149 maintain-ixfr-base <boolean>; // obsolete
150 managed-keys-directory <quoted_string>;
151 masterfile-format ( text | raw );
152 match-mapped-addresses <boolean>;
153 max-acache-size <size_no_default>;
154 max-cache-size <size_no_default>;
155 max-cache-ttl <integer>;
156 max-clients-per-query <integer>;
157 max-ixfr-log-size <size>; // obsolete
158 max-journal-size <size_no_default>;
159 max-ncache-ttl <integer>;
160 max-refresh-time <integer>;
161 max-retry-time <integer>;
162 max-transfer-idle-in <integer>;
163 max-transfer-idle-out <integer>;
164 max-transfer-time-in <integer>;
165 max-transfer-time-out <integer>;
166 max-udp-size <integer>;
167 memstatistics <boolean>;
168 memstatistics-file <quoted_string>;
169 min-refresh-time <integer>;
170 min-retry-time <integer>;
171 min-roots <integer>; // not implemented
172 minimal-responses <boolean>;
173 multi-master <boolean>;
174 multiple-cnames <boolean>; // obsolete
175 named-xfer <quoted_string>; // obsolete
177 notify-delay <integer>;
178 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
179 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
180 notify-to-soa <boolean>;
181 nsec3-test-zone <boolean>; // test only
182 pid-file ( <quoted_string> | none );
184 preferred-glue <string>;
185 provide-ixfr <boolean>;
186 query-source <querysource4>;
187 query-source-v6 <querysource6>;
189 queryport-pool-ports <integer>; // obsolete
190 queryport-pool-updateinterval <integer>; // obsolete
191 random-device <quoted_string>;
192 recursing-file <quoted_string>;
194 recursive-clients <integer>;
195 request-ixfr <boolean>;
196 request-nsid <boolean>;
197 reserved-sockets <integer>;
198 resolver-query-timeout <integer>;
200 zone <string> [ policy ( given | disabled | passthru |
201 no-op | nxdomain | nodata | cname <domain> ) ];
203 rfc2308-type1 <boolean>; // not yet implemented
204 root-delegation-only [ exclude { <quoted_string>; ... } ];
205 rrset-order { [ class <string> ] [ type <string> ] [ name
206 <quoted_string> ] <string> <string>; ... };
207 secroots-file <quoted_string>;
208 serial-queries <integer>; // obsolete
209 serial-query-rate <integer>;
210 server-id ( <quoted_string> | none | hostname );
211 session-keyalg <string>;
212 session-keyfile ( <quoted_string> | none );
213 session-keyname <string>;
214 sig-signing-nodes <integer>;
215 sig-signing-signatures <integer>;
216 sig-signing-type <integer>;
217 sig-validity-interval <integer> [ <integer> ];
218 sortlist { <address_match_element>; ... };
220 statistics-file <quoted_string>;
221 statistics-interval <integer>; // not yet implemented
222 suppress-initial-notify <boolean>; // not yet implemented
223 tcp-clients <integer>;
224 tcp-listen-queue <integer>;
225 tkey-dhkey <quoted_string> <integer>;
226 tkey-domain <quoted_string>;
227 tkey-gssapi-credential <quoted_string>;
228 tkey-gssapi-keytab <quoted_string>;
229 topology { <address_match_element>; ... }; // not implemented
230 transfer-format ( many-answers | one-answer );
231 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
232 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
233 transfers-in <integer>;
234 transfers-out <integer>;
235 transfers-per-ns <integer>;
236 treat-cr-as-space <boolean>; // obsolete
237 try-tcp-refresh <boolean>;
238 update-check-ksk <boolean>;
239 use-alt-transfer-source <boolean>;
240 use-id-pool <boolean>; // obsolete
242 use-queryport-pool <boolean>; // obsolete
243 use-v4-udp-ports { <portrange>; ... };
244 use-v6-udp-ports { <portrange>; ... };
245 version ( <quoted_string> | none );
246 zero-no-soa-ttl <boolean>;
247 zero-no-soa-ttl-cache <boolean>;
248 zone-statistics <boolean>;
254 edns-udp-size <integer>;
256 max-udp-size <integer>;
257 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
258 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
259 provide-ixfr <boolean>;
260 query-source <querysource4>;
261 query-source-v6 <querysource6>;
262 request-ixfr <boolean>;
263 support-ixfr <boolean>; // obsolete
264 transfer-format ( many-answers | one-answer );
265 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
266 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
270 statistics-channels {
271 inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
272 ) ] [ allow { <address_match_element>; ... } ];
275 trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };
277 view <string> <optional_class> {
278 acache-cleaning-interval <integer>;
279 acache-enable <boolean>;
280 additional-from-auth <boolean>;
281 additional-from-cache <boolean>;
282 allow-new-zones <boolean>;
283 allow-notify { <address_match_element>; ... };
284 allow-query { <address_match_element>; ... };
285 allow-query-cache { <address_match_element>; ... };
286 allow-query-cache-on { <address_match_element>; ... };
287 allow-query-on { <address_match_element>; ... };
288 allow-recursion { <address_match_element>; ... };
289 allow-recursion-on { <address_match_element>; ... };
290 allow-transfer { <address_match_element>; ... };
291 allow-update { <address_match_element>; ... };
292 allow-update-forwarding { <address_match_element>; ... };
293 allow-v6-synthesis { <address_match_element>; ... }; // obsolete
294 also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
295 ) [ port <integer> ]; ... };
296 alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
297 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
299 attach-cache <string>;
300 auth-nxdomain <boolean>; // default changed
301 auto-dnssec ( allow | maintain | off );
302 cache-file <quoted_string>;
303 check-dup-records ( fail | warn | ignore );
304 check-integrity <boolean>;
305 check-mx ( fail | warn | ignore );
306 check-mx-cname ( fail | warn | ignore );
307 check-names ( master | slave | response ) ( fail | warn | ignore );
308 check-sibling <boolean>;
309 check-srv-cname ( fail | warn | ignore );
310 check-wildcard <boolean>;
311 cleaning-interval <integer>;
312 clients-per-query <integer>;
314 deny-answer-addresses { <address_match_element>; ... } [
315 except-from { <quoted_string>; ... } ];
316 deny-answer-aliases { <quoted_string>; ... } [ except-from {
317 <quoted_string>; ... } ];
319 disable-algorithms <string> { <string>; ... };
320 disable-empty-zone <string>;
325 break-dnssec <boolean>;
326 clients { <address_match_element>; ... };
327 exclude { <address_match_element>; ... };
328 mapped { <address_match_element>; ... };
329 recursive-only <boolean>;
330 suffix <ipv6_address>;
332 dns64-contact <string>;
333 dns64-server <string>;
334 dnssec-accept-expired <boolean>;
335 dnssec-dnskey-kskonly <boolean>;
336 dnssec-enable <boolean>;
337 dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
338 dnssec-must-be-secure <string> <boolean>;
339 dnssec-secure-to-insecure <boolean>;
340 dnssec-validation ( yes | no | auto );
341 dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
342 <integer> ] | <ipv4_address> [ port <integer> ] |
343 <ipv6_address> [ port <integer> ] ); ... };
344 edns-udp-size <integer>;
345 empty-contact <string>;
346 empty-server <string>;
347 empty-zones-enable <boolean>;
348 fetch-glue <boolean>; // obsolete
349 filter-aaaa { <address_match_element>; ... }; // not configured
350 filter-aaaa-on-v4 <v4_aaaa>; // not configured
351 forward ( first | only );
352 forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
353 [ port <integer> ]; ... };
354 ixfr-from-differences <ixfrdiff>;
359 key-directory <quoted_string>;
361 maintain-ixfr-base <boolean>; // obsolete
362 managed-keys { <string> <string> <integer> <integer> <integer>
363 <quoted_string>; ... };
364 masterfile-format ( text | raw );
365 match-clients { <address_match_element>; ... };
366 match-destinations { <address_match_element>; ... };
367 match-recursive-only <boolean>;
368 max-acache-size <size_no_default>;
369 max-cache-size <size_no_default>;
370 max-cache-ttl <integer>;
371 max-clients-per-query <integer>;
372 max-ixfr-log-size <size>; // obsolete
373 max-journal-size <size_no_default>;
374 max-ncache-ttl <integer>;
375 max-refresh-time <integer>;
376 max-retry-time <integer>;
377 max-transfer-idle-in <integer>;
378 max-transfer-idle-out <integer>;
379 max-transfer-time-in <integer>;
380 max-transfer-time-out <integer>;
381 max-udp-size <integer>;
382 min-refresh-time <integer>;
383 min-retry-time <integer>;
384 min-roots <integer>; // not implemented
385 minimal-responses <boolean>;
386 multi-master <boolean>;
388 notify-delay <integer>;
389 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
390 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
391 notify-to-soa <boolean>;
392 nsec3-test-zone <boolean>; // test only
393 preferred-glue <string>;
394 provide-ixfr <boolean>;
395 query-source <querysource4>;
396 query-source-v6 <querysource6>;
397 queryport-pool-ports <integer>; // obsolete
398 queryport-pool-updateinterval <integer>; // obsolete
400 request-ixfr <boolean>;
401 request-nsid <boolean>;
402 resolver-query-timeout <integer>;
404 zone <string> [ policy ( given | disabled | passthru |
405 no-op | nxdomain | nodata | cname <domain> ) ];
407 rfc2308-type1 <boolean>; // not yet implemented
408 root-delegation-only [ exclude { <quoted_string>; ... } ];
409 rrset-order { [ class <string> ] [ type <string> ] [ name
410 <quoted_string> ] <string> <string>; ... };
414 edns-udp-size <integer>;
416 max-udp-size <integer>;
417 notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
419 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
421 provide-ixfr <boolean>;
422 query-source <querysource4>;
423 query-source-v6 <querysource6>;
424 request-ixfr <boolean>;
425 support-ixfr <boolean>; // obsolete
426 transfer-format ( many-answers | one-answer );
427 transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
429 transfer-source-v6 ( <ipv6_address> | * ) [ port (
433 sig-signing-nodes <integer>;
434 sig-signing-signatures <integer>;
435 sig-signing-type <integer>;
436 sig-validity-interval <integer> [ <integer> ];
437 sortlist { <address_match_element>; ... };
438 suppress-initial-notify <boolean>; // not yet implemented
439 topology { <address_match_element>; ... }; // not implemented
440 transfer-format ( many-answers | one-answer );
441 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
442 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
443 trusted-keys { <string> <integer> <integer> <integer>
444 <quoted_string>; ... };
445 try-tcp-refresh <boolean>;
446 update-check-ksk <boolean>;
447 use-alt-transfer-source <boolean>;
448 use-queryport-pool <boolean>; // obsolete
449 zero-no-soa-ttl <boolean>;
450 zero-no-soa-ttl-cache <boolean>;
451 zone <string> <optional_class> {
452 allow-notify { <address_match_element>; ... };
453 allow-query { <address_match_element>; ... };
454 allow-query-on { <address_match_element>; ... };
455 allow-transfer { <address_match_element>; ... };
456 allow-update { <address_match_element>; ... };
457 allow-update-forwarding { <address_match_element>; ... };
458 also-notify [ port <integer> ] { ( <ipv4_address> |
459 <ipv6_address> ) [ port <integer> ]; ... };
460 alt-transfer-source ( <ipv4_address> | * ) [ port (
462 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
464 auto-dnssec ( allow | maintain | off );
465 check-dup-records ( fail | warn | ignore );
466 check-integrity <boolean>;
467 check-mx ( fail | warn | ignore );
468 check-mx-cname ( fail | warn | ignore );
469 check-names ( fail | warn | ignore );
470 check-sibling <boolean>;
471 check-srv-cname ( fail | warn | ignore );
472 check-wildcard <boolean>;
474 delegation-only <boolean>;
476 dnssec-dnskey-kskonly <boolean>;
477 dnssec-secure-to-insecure <boolean>;
478 file <quoted_string>;
479 forward ( first | only );
480 forwarders [ port <integer> ] { ( <ipv4_address> |
481 <ipv6_address> ) [ port <integer> ]; ... };
482 ixfr-base <quoted_string>; // obsolete
483 ixfr-from-differences <boolean>;
484 ixfr-tmp-file <quoted_string>; // obsolete
485 journal <quoted_string>;
486 key-directory <quoted_string>;
487 maintain-ixfr-base <boolean>; // obsolete
488 masterfile-format ( text | raw );
489 masters [ port <integer> ] { ( <masters> | <ipv4_address> [
490 port <integer> ] | <ipv6_address> [ port <integer> ] )
491 [ key <string> ]; ... };
492 max-ixfr-log-size <size>; // obsolete
493 max-journal-size <size_no_default>;
494 max-refresh-time <integer>;
495 max-retry-time <integer>;
496 max-transfer-idle-in <integer>;
497 max-transfer-idle-out <integer>;
498 max-transfer-time-in <integer>;
499 max-transfer-time-out <integer>;
500 min-refresh-time <integer>;
501 min-retry-time <integer>;
502 multi-master <boolean>;
504 notify-delay <integer>;
505 notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
507 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
509 notify-to-soa <boolean>;
510 nsec3-test-zone <boolean>; // test only
511 pubkey <integer> <integer> <integer>
512 <quoted_string>; // obsolete
513 server-addresses { ( <ipv4_address> | <ipv6_address> ) [
514 port <integer> ]; ... };
515 server-names { <quoted_string>; ... };
516 sig-signing-nodes <integer>;
517 sig-signing-signatures <integer>;
518 sig-signing-type <integer>;
519 sig-validity-interval <integer> [ <integer> ];
520 transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
522 transfer-source-v6 ( <ipv6_address> | * ) [ port (
524 try-tcp-refresh <boolean>;
525 type ( master | slave | stub | static-stub | hint | forward
527 update-check-ksk <boolean>;
528 update-policy ( local | { ( grant | deny ) <string> ( name
529 | subdomain | wildcard | self | selfsub | selfwild |
530 krb5-self | ms-self | krb5-subdomain | ms-subdomain |
531 tcp-self | 6to4-self | zonesub | external ) [ <string>
532 ] <rrtypelist>; ... };
533 use-alt-transfer-source <boolean>;
534 zero-no-soa-ttl <boolean>;
535 zone-statistics <boolean>;
537 zone-statistics <boolean>;
540 zone <string> <optional_class> {
541 allow-notify { <address_match_element>; ... };
542 allow-query { <address_match_element>; ... };
543 allow-query-on { <address_match_element>; ... };
544 allow-transfer { <address_match_element>; ... };
545 allow-update { <address_match_element>; ... };
546 allow-update-forwarding { <address_match_element>; ... };
547 also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
548 ) [ port <integer> ]; ... };
549 alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
550 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
552 auto-dnssec ( allow | maintain | off );
553 check-dup-records ( fail | warn | ignore );
554 check-integrity <boolean>;
555 check-mx ( fail | warn | ignore );
556 check-mx-cname ( fail | warn | ignore );
557 check-names ( fail | warn | ignore );
558 check-sibling <boolean>;
559 check-srv-cname ( fail | warn | ignore );
560 check-wildcard <boolean>;
562 delegation-only <boolean>;
564 dnssec-dnskey-kskonly <boolean>;
565 dnssec-secure-to-insecure <boolean>;
566 file <quoted_string>;
567 forward ( first | only );
568 forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
569 [ port <integer> ]; ... };
570 ixfr-base <quoted_string>; // obsolete
571 ixfr-from-differences <boolean>;
572 ixfr-tmp-file <quoted_string>; // obsolete
573 journal <quoted_string>;
574 key-directory <quoted_string>;
575 maintain-ixfr-base <boolean>; // obsolete
576 masterfile-format ( text | raw );
577 masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port
578 <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
580 max-ixfr-log-size <size>; // obsolete
581 max-journal-size <size_no_default>;
582 max-refresh-time <integer>;
583 max-retry-time <integer>;
584 max-transfer-idle-in <integer>;
585 max-transfer-idle-out <integer>;
586 max-transfer-time-in <integer>;
587 max-transfer-time-out <integer>;
588 min-refresh-time <integer>;
589 min-retry-time <integer>;
590 multi-master <boolean>;
592 notify-delay <integer>;
593 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
594 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
595 notify-to-soa <boolean>;
596 nsec3-test-zone <boolean>; // test only
597 pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
598 server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port
600 server-names { <quoted_string>; ... };
601 sig-signing-nodes <integer>;
602 sig-signing-signatures <integer>;
603 sig-signing-type <integer>;
604 sig-validity-interval <integer> [ <integer> ];
605 transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
606 transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
607 try-tcp-refresh <boolean>;
608 type ( master | slave | stub | static-stub | hint | forward |
610 update-check-ksk <boolean>;
611 update-policy ( local | { ( grant | deny ) <string> ( name |
612 subdomain | wildcard | self | selfsub | selfwild | krb5-self |
613 ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self
614 | zonesub | external ) [ <string> ] <rrtypelist>; ... };
615 use-alt-transfer-source <boolean>;
616 zero-no-soa-ttl <boolean>;
617 zone-statistics <boolean>;