contrib/bind9/bin/named/named.conf.docbook

   1 <!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
   2                "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
   3                [<!ENTITY mdash "&#8212;">]>
   4 <!--
   5  - Copyright (C) 2004-2008  Internet Systems Consortium, Inc. ("ISC")
   6  -
   7  - Permission to use, copy, modify, and/or distribute this software for any
   8  - purpose with or without fee is hereby granted, provided that the above
   9  - copyright notice and this permission notice appear in all copies.
  10  -
  11  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  12  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  13  - AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  14  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  15  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  16  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  17  - PERFORMANCE OF THIS SOFTWARE.
  18 -->
  19
  20 <!-- $Id: named.conf.docbook,v 1.1.2.31 2008/09/04 23:46:08 tbox Exp $ -->
  21 <refentry>
  22   <refentryinfo>
  23     <date>Aug 13, 2004</date>
  24   </refentryinfo>
  25
  26   <refmeta>
  27     <refentrytitle><filename>named.conf</filename></refentrytitle>
  28     <manvolnum>5</manvolnum>
  29     <refmiscinfo>BIND9</refmiscinfo>
  30   </refmeta>
  31
  32   <refnamediv>
  33     <refname><filename>named.conf</filename></refname>
  34     <refpurpose>configuration file for named</refpurpose>
  35   </refnamediv>
  36
  37   <docinfo>
  38     <copyright>
  39       <year>2004</year>
  40       <year>2005</year>
  41       <year>2006</year>
  42       <year>2007</year>
  43       <year>2008</year>
  44       <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
  45     </copyright>
  46   </docinfo>
  47
  48   <refsynopsisdiv>
  49     <cmdsynopsis>
  50       <command>named.conf</command>
  51     </cmdsynopsis>
  52   </refsynopsisdiv>
  53
  54   <refsect1>
  55     <title>DESCRIPTION</title>
  56     <para><filename>named.conf</filename> is the configuration file
  57       for
  58       <command>named</command>.  Statements are enclosed
  59       in braces and terminated with a semi-colon.  Clauses in
  60       the statements are also semi-colon terminated.  The usual
  61       comment styles are supported:
  62     </para>
  63     <para>
  64       C style: /* */
  65     </para>
  66     <para>
  67       C++ style: // to end of line
  68     </para>
  69     <para>
  70       Unix style: # to end of line
  71     </para>
  72   </refsect1>
  73
  74   <refsect1>
  75     <title>ACL</title>
  76     <literallayout>
  77 acl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
  78
  79 </literallayout>
  80   </refsect1>
  81
  82   <refsect1>
  83     <title>KEY</title>
  84     <literallayout>
  85 key <replaceable>domain_name</replaceable> {
  86         algorithm <replaceable>string</replaceable>;
  87         secret <replaceable>string</replaceable>;
  88 };
  89 </literallayout>
  90   </refsect1>
  91
  92   <refsect1>
  93     <title>MASTERS</title>
  94     <literallayout>
  95 masters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
  96         ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
  97         <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
  98 };
  99 </literallayout>
 100   </refsect1>
 101
 102   <refsect1>
 103     <title>SERVER</title>
 104     <literallayout>
 105 server ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
 106         bogus <replaceable>boolean</replaceable>;
 107         edns <replaceable>boolean</replaceable>;
 108         edns-udp-size <replaceable>integer</replaceable>;
 109         max-udp-size <replaceable>integer</replaceable>;
 110         provide-ixfr <replaceable>boolean</replaceable>;
 111         request-ixfr <replaceable>boolean</replaceable>;
 112         keys <replaceable>server_key</replaceable>;
 113         transfers <replaceable>integer</replaceable>;
 114         transfer-format ( many-answers | one-answer );
 115         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 116                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 117         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 118                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 119
 120         support-ixfr <replaceable>boolean</replaceable>; // obsolete
 121 };
 122 </literallayout>
 123   </refsect1>
 124
 125   <refsect1>
 126     <title>TRUSTED-KEYS</title>
 127     <literallayout>
 128 trusted-keys {
 129         <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
 130 };
 131 </literallayout>
 132   </refsect1>
 133
 134   <refsect1>
 135     <title>CONTROLS</title>
 136     <literallayout>
 137 controls {
 138         inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
 139                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
 140                 allow { <replaceable>address_match_element</replaceable>; ... }
 141                 <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
 142         unix <replaceable>unsupported</replaceable>; // not implemented
 143 };
 144 </literallayout>
 145   </refsect1>
 146
 147   <refsect1>
 148     <title>LOGGING</title>
 149     <literallayout>
 150 logging {
 151         channel <replaceable>string</replaceable> {
 152                 file <replaceable>log_file</replaceable>;
 153                 syslog <replaceable>optional_facility</replaceable>;
 154                 null;
 155                 stderr;
 156                 severity <replaceable>log_severity</replaceable>;
 157                 print-time <replaceable>boolean</replaceable>;
 158                 print-severity <replaceable>boolean</replaceable>;
 159                 print-category <replaceable>boolean</replaceable>;
 160         };
 161         category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 162 };
 163 </literallayout>
 164   </refsect1>
 165
 166   <refsect1>
 167     <title>LWRES</title>
 168     <literallayout>
 169 lwres {
 170         listen-on <optional> port <replaceable>integer</replaceable> </optional> {
 171                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 172         };
 173         view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
 174         search { <replaceable>string</replaceable>; ... };
 175         ndots <replaceable>integer</replaceable>;
 176 };
 177 </literallayout>
 178   </refsect1>
 179
 180   <refsect1>
 181     <title>OPTIONS</title>
 182     <literallayout>
 183 options {
 184         avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
 185         avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
 186         blackhole { <replaceable>address_match_element</replaceable>; ... };
 187         coresize <replaceable>size</replaceable>;
 188         datasize <replaceable>size</replaceable>;
 189         directory <replaceable>quoted_string</replaceable>;
 190         dump-file <replaceable>quoted_string</replaceable>;
 191         files <replaceable>size</replaceable>;
 192         heartbeat-interval <replaceable>integer</replaceable>;
 193         host-statistics <replaceable>boolean</replaceable>; // not implemented
 194         host-statistics-max <replaceable>number</replaceable>; // not implemented
 195         hostname ( <replaceable>quoted_string</replaceable> | none );
 196         interface-interval <replaceable>integer</replaceable>;
 197         listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
 198         listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
 199         match-mapped-addresses <replaceable>boolean</replaceable>;
 200         memstatistics-file <replaceable>quoted_string</replaceable>;
 201         pid-file ( <replaceable>quoted_string</replaceable> | none );
 202         port <replaceable>integer</replaceable>;
 203         querylog <replaceable>boolean</replaceable>;
 204         recursing-file <replaceable>quoted_string</replaceable>;
 205         reserved-sockets <replaceable>integer</replaceable>;
 206         random-device <replaceable>quoted_string</replaceable>;
 207         recursive-clients <replaceable>integer</replaceable>;
 208         serial-query-rate <replaceable>integer</replaceable>;
 209         server-id ( <replaceable>quoted_string</replaceable> | none |;
 210         stacksize <replaceable>size</replaceable>;
 211         statistics-file <replaceable>quoted_string</replaceable>;
 212         statistics-interval <replaceable>integer</replaceable>; // not yet implemented
 213         tcp-clients <replaceable>integer</replaceable>;
 214         tcp-listen-queue <replaceable>integer</replaceable>;
 215         tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
 216         tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
 217         tkey-domain <replaceable>quoted_string</replaceable>;
 218         transfers-per-ns <replaceable>integer</replaceable>;
 219         transfers-in <replaceable>integer</replaceable>;
 220         transfers-out <replaceable>integer</replaceable>;
 221         use-ixfr <replaceable>boolean</replaceable>;
 222         version ( <replaceable>quoted_string</replaceable> | none );
 223         allow-recursion { <replaceable>address_match_element</replaceable>; ... };
 224         sortlist { <replaceable>address_match_element</replaceable>; ... };
 225         topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
 226         auth-nxdomain <replaceable>boolean</replaceable>; // default changed
 227         minimal-responses <replaceable>boolean</replaceable>;
 228         recursion <replaceable>boolean</replaceable>;
 229         rrset-order {
 230                 <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
 231                 <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
 232         };
 233         provide-ixfr <replaceable>boolean</replaceable>;
 234         request-ixfr <replaceable>boolean</replaceable>;
 235         rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
 236         additional-from-auth <replaceable>boolean</replaceable>;
 237         additional-from-cache <replaceable>boolean</replaceable>;
 238         query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 239         query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 240         cleaning-interval <replaceable>integer</replaceable>;
 241         min-roots <replaceable>integer</replaceable>; // not implemented
 242         lame-ttl <replaceable>integer</replaceable>;
 243         max-ncache-ttl <replaceable>integer</replaceable>;
 244         max-cache-ttl <replaceable>integer</replaceable>;
 245         transfer-format ( many-answers | one-answer );
 246         max-cache-size <replaceable>size_no_default</replaceable>;
 247         max-acache-size <replaceable>size_no_default</replaceable>;
 248         clients-per-query <replaceable>number</replaceable>;
 249         max-clients-per-query <replaceable>number</replaceable>;
 250         check-names ( master | slave | response )
 251                 ( fail | warn | ignore );
 252         check-mx ( fail | warn | ignore );
 253         check-integrity <replaceable>boolean</replaceable>;
 254         check-mx-cname ( fail | warn | ignore );
 255         check-srv-cname ( fail | warn | ignore );
 256         cache-file <replaceable>quoted_string</replaceable>; // test option
 257         suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
 258         preferred-glue <replaceable>string</replaceable>;
 259         dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
 260                 ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 261                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 262                 <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
 263         };
 264         edns-udp-size <replaceable>integer</replaceable>;
 265         max-udp-size <replaceable>integer</replaceable>;
 266         root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
 267         disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 268         dnssec-enable <replaceable>boolean</replaceable>;
 269         dnssec-validation <replaceable>boolean</replaceable>;
 270         dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
 271         dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
 272         dnssec-accept-expired <replaceable>boolean</replaceable>;
 273
 274         empty-server <replaceable>string</replaceable>;
 275         empty-contact <replaceable>string</replaceable>;
 276         empty-zones-enable <replaceable>boolean</replaceable>;
 277         disable-empty-zone <replaceable>string</replaceable>;
 278
 279         dialup <replaceable>dialuptype</replaceable>;
 280         ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
 281
 282         allow-query { <replaceable>address_match_element</replaceable>; ... };
 283         allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
 284         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 285         allow-update { <replaceable>address_match_element</replaceable>; ... };
 286         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 287         update-check-ksk <replaceable>boolean</replaceable>;
 288
 289         masterfile-format ( text | raw );
 290         notify <replaceable>notifytype</replaceable>;
 291         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 292         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 293         notify-delay <replaceable>seconds</replaceable>;
 294         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 295                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 296         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 297
 298         forward ( first | only );
 299         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 300                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 301         };
 302
 303         max-journal-size <replaceable>size_no_default</replaceable>;
 304         max-transfer-time-in <replaceable>integer</replaceable>;
 305         max-transfer-time-out <replaceable>integer</replaceable>;
 306         max-transfer-idle-in <replaceable>integer</replaceable>;
 307         max-transfer-idle-out <replaceable>integer</replaceable>;
 308         max-retry-time <replaceable>integer</replaceable>;
 309         min-retry-time <replaceable>integer</replaceable>;
 310         max-refresh-time <replaceable>integer</replaceable>;
 311         min-refresh-time <replaceable>integer</replaceable>;
 312         multi-master <replaceable>boolean</replaceable>;
 313         sig-validity-interval <replaceable>integer</replaceable>;
 314
 315         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 316                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 317         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 318                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 319
 320         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 321                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 322         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 323                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 324         use-alt-transfer-source <replaceable>boolean</replaceable>;
 325
 326         zone-statistics <replaceable>boolean</replaceable>;
 327         key-directory <replaceable>quoted_string</replaceable>;
 328         zero-no-soa-ttl <replaceable>boolean</replaceable>;
 329         zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
 330
 331         allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
 332         deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
 333         fake-iquery <replaceable>boolean</replaceable>; // obsolete
 334         fetch-glue <replaceable>boolean</replaceable>; // obsolete
 335         has-old-clients <replaceable>boolean</replaceable>; // obsolete
 336         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 337         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 338         multiple-cnames <replaceable>boolean</replaceable>; // obsolete
 339         named-xfer <replaceable>quoted_string</replaceable>; // obsolete
 340         serial-queries <replaceable>integer</replaceable>; // obsolete
 341         treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
 342         use-id-pool <replaceable>boolean</replaceable>; // obsolete
 343 };
 344 </literallayout>
 345   </refsect1>
 346
 347   <refsect1>
 348     <title>VIEW</title>
 349     <literallayout>
 350 view <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 351         match-clients { <replaceable>address_match_element</replaceable>; ... };
 352         match-destinations { <replaceable>address_match_element</replaceable>; ... };
 353         match-recursive-only <replaceable>boolean</replaceable>;
 354
 355         key <replaceable>string</replaceable> {
 356                 algorithm <replaceable>string</replaceable>;
 357                 secret <replaceable>string</replaceable>;
 358         };
 359
 360         zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 361                 ...
 362         };
 363
 364         server ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
 365                 ...
 366         };
 367
 368         trusted-keys {
 369                 <replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; ...
 370         };
 371
 372         allow-recursion { <replaceable>address_match_element</replaceable>; ... };
 373         sortlist { <replaceable>address_match_element</replaceable>; ... };
 374         topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
 375         auth-nxdomain <replaceable>boolean</replaceable>; // default changed
 376         minimal-responses <replaceable>boolean</replaceable>;
 377         recursion <replaceable>boolean</replaceable>;
 378         rrset-order {
 379                 <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
 380                 <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
 381         };
 382         provide-ixfr <replaceable>boolean</replaceable>;
 383         request-ixfr <replaceable>boolean</replaceable>;
 384         rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
 385         additional-from-auth <replaceable>boolean</replaceable>;
 386         additional-from-cache <replaceable>boolean</replaceable>;
 387         query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 388         query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 389         cleaning-interval <replaceable>integer</replaceable>;
 390         min-roots <replaceable>integer</replaceable>; // not implemented
 391         lame-ttl <replaceable>integer</replaceable>;
 392         max-ncache-ttl <replaceable>integer</replaceable>;
 393         max-cache-ttl <replaceable>integer</replaceable>;
 394         transfer-format ( many-answers | one-answer );
 395         max-cache-size <replaceable>size_no_default</replaceable>;
 396         max-acache-size <replaceable>size_no_default</replaceable>;
 397         clients-per-query <replaceable>number</replaceable>;
 398         max-clients-per-query <replaceable>number</replaceable>;
 399         check-names ( master | slave | response )
 400                 ( fail | warn | ignore );
 401         check-mx ( fail | warn | ignore );
 402         check-integrity <replaceable>boolean</replaceable>;
 403         check-mx-cname ( fail | warn | ignore );
 404         check-srv-cname ( fail | warn | ignore );
 405         cache-file <replaceable>quoted_string</replaceable>; // test option
 406         suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
 407         preferred-glue <replaceable>string</replaceable>;
 408         dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
 409                 ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 410                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 411                 <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
 412         };
 413         edns-udp-size <replaceable>integer</replaceable>;
 414         max-udp-size <replaceable>integer</replaceable>;
 415         root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
 416         disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
 417         dnssec-enable <replaceable>boolean</replaceable>;
 418         dnssec-validation <replaceable>boolean</replaceable>;
 419         dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
 420         dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
 421         dnssec-accept-expired <replaceable>boolean</replaceable>;
 422
 423         empty-server <replaceable>string</replaceable>;
 424         empty-contact <replaceable>string</replaceable>;
 425         empty-zones-enable <replaceable>boolean</replaceable>;
 426         disable-empty-zone <replaceable>string</replaceable>;
 427
 428         dialup <replaceable>dialuptype</replaceable>;
 429         ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
 430
 431         allow-query { <replaceable>address_match_element</replaceable>; ... };
 432         allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
 433         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 434         allow-update { <replaceable>address_match_element</replaceable>; ... };
 435         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 436         update-check-ksk <replaceable>boolean</replaceable>;
 437
 438         masterfile-format ( text | raw );
 439         notify <replaceable>notifytype</replaceable>;
 440         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 441         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 442         notify-delay <replaceable>seconds</replaceable>;
 443         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 444                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 445         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 446
 447         forward ( first | only );
 448         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 449                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 450         };
 451
 452         max-journal-size <replaceable>size_no_default</replaceable>;
 453         max-transfer-time-in <replaceable>integer</replaceable>;
 454         max-transfer-time-out <replaceable>integer</replaceable>;
 455         max-transfer-idle-in <replaceable>integer</replaceable>;
 456         max-transfer-idle-out <replaceable>integer</replaceable>;
 457         max-retry-time <replaceable>integer</replaceable>;
 458         min-retry-time <replaceable>integer</replaceable>;
 459         max-refresh-time <replaceable>integer</replaceable>;
 460         min-refresh-time <replaceable>integer</replaceable>;
 461         multi-master <replaceable>boolean</replaceable>;
 462         sig-validity-interval <replaceable>integer</replaceable>;
 463
 464         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 465                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 466         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 467                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 468
 469         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 470                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 471         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 472                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 473         use-alt-transfer-source <replaceable>boolean</replaceable>;
 474
 475         zone-statistics <replaceable>boolean</replaceable>;
 476         key-directory <replaceable>quoted_string</replaceable>;
 477         zero-no-soa-ttl <replaceable>boolean</replaceable>;
 478         zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
 479
 480         allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
 481         fetch-glue <replaceable>boolean</replaceable>; // obsolete
 482         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 483         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 484 };
 485 </literallayout>
 486   </refsect1>
 487
 488   <refsect1>
 489     <title>ZONE</title>
 490     <literallayout>
 491 zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
 492         type ( master | slave | stub | hint |
 493                 forward | delegation-only );
 494         file <replaceable>quoted_string</replaceable>;
 495
 496         masters <optional> port <replaceable>integer</replaceable> </optional> {
 497                 ( <replaceable>masters</replaceable> |
 498                 <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
 499                 <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
 500         };
 501
 502         database <replaceable>string</replaceable>;
 503         delegation-only <replaceable>boolean</replaceable>;
 504         check-names ( fail | warn | ignore );
 505         check-mx ( fail | warn | ignore );
 506         check-integrity <replaceable>boolean</replaceable>;
 507         check-mx-cname ( fail | warn | ignore );
 508         check-srv-cname ( fail | warn | ignore );
 509         dialup <replaceable>dialuptype</replaceable>;
 510         ixfr-from-differences <replaceable>boolean</replaceable>;
 511         journal <replaceable>quoted_string</replaceable>;
 512         zero-no-soa-ttl <replaceable>boolean</replaceable>;
 513
 514         allow-query { <replaceable>address_match_element</replaceable>; ... };
 515         allow-transfer { <replaceable>address_match_element</replaceable>; ... };
 516         allow-update { <replaceable>address_match_element</replaceable>; ... };
 517         allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
 518         update-policy {
 519                 ( grant | deny ) <replaceable>string</replaceable>
 520                 ( name | subdomain | wildcard | self ) <replaceable>string</replaceable>
 521                 <replaceable>rrtypelist</replaceable>; ...
 522         };
 523         update-check-ksk <replaceable>boolean</replaceable>;
 524
 525         masterfile-format ( text | raw );
 526         notify <replaceable>notifytype</replaceable>;
 527         notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 528         notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 529         notify-delay <replaceable>seconds</replaceable>;
 530         also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
 531                 <optional> port <replaceable>integer</replaceable> </optional>; ... };
 532         allow-notify { <replaceable>address_match_element</replaceable>; ... };
 533
 534         forward ( first | only );
 535         forwarders <optional> port <replaceable>integer</replaceable> </optional> {
 536                 ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
 537         };
 538
 539         max-journal-size <replaceable>size_no_default</replaceable>;
 540         max-transfer-time-in <replaceable>integer</replaceable>;
 541         max-transfer-time-out <replaceable>integer</replaceable>;
 542         max-transfer-idle-in <replaceable>integer</replaceable>;
 543         max-transfer-idle-out <replaceable>integer</replaceable>;
 544         max-retry-time <replaceable>integer</replaceable>;
 545         min-retry-time <replaceable>integer</replaceable>;
 546         max-refresh-time <replaceable>integer</replaceable>;
 547         min-refresh-time <replaceable>integer</replaceable>;
 548         multi-master <replaceable>boolean</replaceable>;
 549         sig-validity-interval <replaceable>integer</replaceable>;
 550
 551         transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 552                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 553         transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 554                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 555
 556         alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
 557                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 558         alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
 559                 <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
 560         use-alt-transfer-source <replaceable>boolean</replaceable>;
 561
 562         zone-statistics <replaceable>boolean</replaceable>;
 563         key-directory <replaceable>quoted_string</replaceable>;
 564
 565         ixfr-base <replaceable>quoted_string</replaceable>; // obsolete
 566         ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete
 567         maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
 568         max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
 569         pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete
 570 };
 571 </literallayout>
 572   </refsect1>
 573
 574   <refsect1>
 575     <title>FILES</title>
 576     <para><filename>/etc/named.conf</filename>
 577     </para>
 578   </refsect1>
 579
 580   <refsect1>
 581     <title>SEE ALSO</title>
 582     <para><citerefentry>
 583         <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
 584       </citerefentry>,
 585       <citerefentry>
 586         <refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>
 587       </citerefentry>,
 588       <citerefentry>
 589         <refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>
 590       </citerefentry>,
 591       <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
 592     </para>
 593   </refsect1>
 594
 595 </refentry><!--
 596  - Local variables:
 597  - mode: sgml
 598  - End:
 599 -->