contrib/bind9/bin/named/named.conf.html

   1 <!--
   2  - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
   3  -
   4  - Permission to use, copy, modify, and distribute this software for any
   5  - purpose with or without fee is hereby granted, provided that the above
   6  - copyright notice and this permission notice appear in all copies.
   7  -
   8  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
   9  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  10  - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  11  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  12  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  13  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  14  - PERFORMANCE OF THIS SOFTWARE.
  15 -->
  16 <!-- $Id: named.conf.html,v 1.45 2008/09/25 04:45:04 tbox Exp $ -->
  17 <html>
  18 <head>
  19 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
  20 <title>named.conf</title>
  21 <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  22 </head>
  23 <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
  24 <a name="id2476275"></a><div class="titlepage"></div>
  25 <div class="refnamediv">
  26 <h2>Name</h2>
  27 <p><code class="filename">named.conf</code> &#8212; configuration file for named</p>
  28 </div>
  29 <div class="refsynopsisdiv">
  30 <h2>Synopsis</h2>
  31 <div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
  32 </div>
  33 <div class="refsect1" lang="en">
  34 <a name="id2543342"></a><h2>DESCRIPTION</h2>
  35 <p><code class="filename">named.conf</code> is the configuration file
  36       for
  37       <span><strong class="command">named</strong></span>.  Statements are enclosed
  38       in braces and terminated with a semi-colon.  Clauses in
  39       the statements are also semi-colon terminated.  The usual
  40       comment styles are supported:
  41     </p>
  42 <p>
  43       C style: /* */
  44     </p>
  45 <p>
  46       C++ style: // to end of line
  47     </p>
  48 <p>
  49       Unix style: # to end of line
  50     </p>
  51 </div>
  52 <div class="refsect1" lang="en">
  53 <a name="id2543370"></a><h2>ACL</h2>
  54 <div class="literallayout"><p><br>
  55 acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
  56 <br>
  57 </p></div>
  58 </div>
  59 <div class="refsect1" lang="en">
  60 <a name="id2543386"></a><h2>KEY</h2>
  61 <div class="literallayout"><p><br>
  62 key <em class="replaceable"><code>domain_name</code></em> {<br>
  63         algorithm <em class="replaceable"><code>string</code></em>;<br>
  64         secret <em class="replaceable"><code>string</code></em>;<br>
  65 };<br>
  66 </p></div>
  67 </div>
  68 <div class="refsect1" lang="en">
  69 <a name="id2543405"></a><h2>MASTERS</h2>
  70 <div class="literallayout"><p><br>
  71 masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
  72         ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
  73         <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
  74 };<br>
  75 </p></div>
  76 </div>
  77 <div class="refsect1" lang="en">
  78 <a name="id2543451"></a><h2>SERVER</h2>
  79 <div class="literallayout"><p><br>
  80 server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
  81         bogus <em class="replaceable"><code>boolean</code></em>;<br>
  82         edns <em class="replaceable"><code>boolean</code></em>;<br>
  83         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
  84         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
  85         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
  86         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
  87         keys <em class="replaceable"><code>server_key</code></em>;<br>
  88         transfers <em class="replaceable"><code>integer</code></em>;<br>
  89         transfer-format ( many-answers | one-answer );<br>
  90         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
  91                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
  92         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
  93                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
  94 <br>
  95         support-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
  96 };<br>
  97 </p></div>
  98 </div>
  99 <div class="refsect1" lang="en">
 100 <a name="id2543520"></a><h2>TRUSTED-KEYS</h2>
 101 <div class="literallayout"><p><br>
 102 trusted-keys {<br>
 103         <em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
 104 };<br>
 105 </p></div>
 106 </div>
 107 <div class="refsect1" lang="en">
 108 <a name="id2543545"></a><h2>CONTROLS</h2>
 109 <div class="literallayout"><p><br>
 110 controls {<br>
 111         inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
 112                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
 113                 allow { <em class="replaceable"><code>address_match_element</code></em>; ... }<br>
 114                 [<span class="optional"> keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
 115         unix <em class="replaceable"><code>unsupported</code></em>; // not implemented<br>
 116 };<br>
 117 </p></div>
 118 </div>
 119 <div class="refsect1" lang="en">
 120 <a name="id2543580"></a><h2>LOGGING</h2>
 121 <div class="literallayout"><p><br>
 122 logging {<br>
 123         channel <em class="replaceable"><code>string</code></em> {<br>
 124                 file <em class="replaceable"><code>log_file</code></em>;<br>
 125                 syslog <em class="replaceable"><code>optional_facility</code></em>;<br>
 126                 null;<br>
 127                 stderr;<br>
 128                 severity <em class="replaceable"><code>log_severity</code></em>;<br>
 129                 print-time <em class="replaceable"><code>boolean</code></em>;<br>
 130                 print-severity <em class="replaceable"><code>boolean</code></em>;<br>
 131                 print-category <em class="replaceable"><code>boolean</code></em>;<br>
 132         };<br>
 133         category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
 134 };<br>
 135 </p></div>
 136 </div>
 137 <div class="refsect1" lang="en">
 138 <a name="id2543619"></a><h2>LWRES</h2>
 139 <div class="literallayout"><p><br>
 140 lwres {<br>
 141         listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
 142                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
 143         };<br>
 144         view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em>;<br>
 145         search { <em class="replaceable"><code>string</code></em>; ... };<br>
 146         ndots <em class="replaceable"><code>integer</code></em>;<br>
 147 };<br>
 148 </p></div>
 149 </div>
 150 <div class="refsect1" lang="en">
 151 <a name="id2543660"></a><h2>OPTIONS</h2>
 152 <div class="literallayout"><p><br>
 153 options {<br>
 154         avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
 155         avoid-v6-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
 156         blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 157         coresize <em class="replaceable"><code>size</code></em>;<br>
 158         datasize <em class="replaceable"><code>size</code></em>;<br>
 159         directory <em class="replaceable"><code>quoted_string</code></em>;<br>
 160         dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
 161         files <em class="replaceable"><code>size</code></em>;<br>
 162         heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
 163         host-statistics <em class="replaceable"><code>boolean</code></em>; // not implemented<br>
 164         host-statistics-max <em class="replaceable"><code>number</code></em>; // not implemented<br>
 165         hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
 166         interface-interval <em class="replaceable"><code>integer</code></em>;<br>
 167         listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 168         listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 169         match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
 170         memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
 171         pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
 172         port <em class="replaceable"><code>integer</code></em>;<br>
 173         querylog <em class="replaceable"><code>boolean</code></em>;<br>
 174         recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
 175         reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
 176         random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
 177         recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
 178         serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
 179         server-id ( <em class="replaceable"><code>quoted_string</code></em> | none |;<br>
 180         stacksize <em class="replaceable"><code>size</code></em>;<br>
 181         statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
 182         statistics-interval <em class="replaceable"><code>integer</code></em>; // not yet implemented<br>
 183         tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
 184         tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
 185         tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
 186         tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
 187         tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
 188         transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
 189         transfers-in <em class="replaceable"><code>integer</code></em>;<br>
 190         transfers-out <em class="replaceable"><code>integer</code></em>;<br>
 191         use-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
 192         version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
 193         allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 194         allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 195         sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 196         topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
 197         auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
 198         minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
 199         recursion <em class="replaceable"><code>boolean</code></em>;<br>
 200         rrset-order {<br>
 201                 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
 202                 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
 203         };<br>
 204         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
 205         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
 206         rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
 207         additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
 208         additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
 209         query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 210         query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 211         use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
 212         queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
 213         queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
 214         cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
 215         min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
 216         lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
 217         max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
 218         max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
 219         transfer-format ( many-answers | one-answer );<br>
 220         max-cache-size <em class="replaceable"><code>size</code></em>;<br>
 221         max-acache-size <em class="replaceable"><code>size</code></em>;<br>
 222         clients-per-query <em class="replaceable"><code>number</code></em>;<br>
 223         max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
 224         check-names ( master | slave | response )<br>
 225                 ( fail | warn | ignore );<br>
 226         check-mx ( fail | warn | ignore );<br>
 227         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
 228         check-mx-cname ( fail | warn | ignore );<br>
 229         check-srv-cname ( fail | warn | ignore );<br>
 230         cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
 231         suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
 232         preferred-glue <em class="replaceable"><code>string</code></em>;<br>
 233         dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
 234                 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
 235                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
 236                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
 237         };<br>
 238         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
 239         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
 240         root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
 241         disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
 242         dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
 243         dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
 244         dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
 245         dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
 246         dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
 247 <br>
 248         empty-server <em class="replaceable"><code>string</code></em>;<br>
 249         empty-contact <em class="replaceable"><code>string</code></em>;<br>
 250         empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
 251         disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
 252 <br>
 253         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
 254         ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
 255 <br>
 256         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 257         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 258         allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 259         allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 260         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 261         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 262         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 263         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
 264 <br>
 265         masterfile-format ( text | raw );<br>
 266         notify <em class="replaceable"><code>notifytype</code></em>;<br>
 267         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 268         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 269         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
 270         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
 271         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
 272                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
 273         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 274 <br>
 275         forward ( first | only );<br>
 276         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
 277                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
 278         };<br>
 279 <br>
 280         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
 281         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
 282         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
 283         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
 284         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
 285         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
 286         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
 287         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
 288         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
 289         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
 290 <br>
 291         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
 292         sig-re-signing-interval <em class="replaceable"><code>integer</code></em>;<br>
 293         sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
 294         sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
 295         sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
 296 <br>
 297         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
 298                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 299         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
 300                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 301 <br>
 302         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
 303                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 304         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
 305                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 306         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
 307 <br>
 308         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
 309         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
 310         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
 311         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
 312         zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
 313 <br>
 314         nsec3-test-zone <em class="replaceable"><code>boolean</code></em>;  // testing only<br>
 315 <br>
 316         allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
 317         deallocate-on-exit <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 318         fake-iquery <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 319         fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 320         has-old-clients <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 321         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 322         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
 323         multiple-cnames <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 324         named-xfer <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
 325         serial-queries <em class="replaceable"><code>integer</code></em>; // obsolete<br>
 326         treat-cr-as-space <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 327         use-id-pool <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 328 };<br>
 329 </p></div>
 330 </div>
 331 <div class="refsect1" lang="en">
 332 <a name="id2544452"></a><h2>VIEW</h2>
 333 <div class="literallayout"><p><br>
 334 view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
 335         match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 336         match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 337         match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
 338 <br>
 339         key <em class="replaceable"><code>string</code></em> {<br>
 340                 algorithm <em class="replaceable"><code>string</code></em>;<br>
 341                 secret <em class="replaceable"><code>string</code></em>;<br>
 342         };<br>
 343 <br>
 344         zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
 345                 ...<br>
 346         };<br>
 347 <br>
 348         server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
 349                 ...<br>
 350         };<br>
 351 <br>
 352         trusted-keys {<br>
 353                 <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ...<br>
 354         };<br>
 355 <br>
 356         allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 357         allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 358         sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 359         topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
 360         auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
 361         minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
 362         recursion <em class="replaceable"><code>boolean</code></em>;<br>
 363         rrset-order {<br>
 364                 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
 365                 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
 366         };<br>
 367         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
 368         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
 369         rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
 370         additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
 371         additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
 372         query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 373         query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 374         use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
 375         queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
 376         queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
 377         cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
 378         min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
 379         lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
 380         max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
 381         max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
 382         transfer-format ( many-answers | one-answer );<br>
 383         max-cache-size <em class="replaceable"><code>size</code></em>;<br>
 384         max-acache-size <em class="replaceable"><code>size</code></em>;<br>
 385         clients-per-query <em class="replaceable"><code>number</code></em>;<br>
 386         max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
 387         check-names ( master | slave | response )<br>
 388                 ( fail | warn | ignore );<br>
 389         check-mx ( fail | warn | ignore );<br>
 390         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
 391         check-mx-cname ( fail | warn | ignore );<br>
 392         check-srv-cname ( fail | warn | ignore );<br>
 393         cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
 394         suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
 395         preferred-glue <em class="replaceable"><code>string</code></em>;<br>
 396         dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
 397                 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
 398                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
 399                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
 400         };<br>
 401         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
 402         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
 403         root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
 404         disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
 405         dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
 406         dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
 407         dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
 408         dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
 409         dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
 410 <br>
 411         empty-server <em class="replaceable"><code>string</code></em>;<br>
 412         empty-contact <em class="replaceable"><code>string</code></em>;<br>
 413         empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
 414         disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
 415 <br>
 416         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
 417         ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
 418 <br>
 419         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 420         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 421         allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 422         allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 423         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 424         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 425         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 426         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
 427 <br>
 428         masterfile-format ( text | raw );<br>
 429         notify <em class="replaceable"><code>notifytype</code></em>;<br>
 430         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 431         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 432         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
 433         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
 434         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
 435                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
 436         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 437 <br>
 438         forward ( first | only );<br>
 439         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
 440                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
 441         };<br>
 442 <br>
 443         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
 444         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
 445         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
 446         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
 447         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
 448         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
 449         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
 450         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
 451         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
 452         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
 453         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
 454 <br>
 455         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
 456                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 457         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
 458                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 459 <br>
 460         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
 461                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 462         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
 463                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 464         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
 465 <br>
 466         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
 467         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
 468         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
 469         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
 470         zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
 471 <br>
 472         allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
 473         fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 474         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 475         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
 476 };<br>
 477 </p></div>
 478 </div>
 479 <div class="refsect1" lang="en">
 480 <a name="id2545113"></a><h2>ZONE</h2>
 481 <div class="literallayout"><p><br>
 482 zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
 483         type ( master | slave | stub | hint |<br>
 484                 forward | delegation-only );<br>
 485         file <em class="replaceable"><code>quoted_string</code></em>;<br>
 486 <br>
 487         masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
 488                 ( <em class="replaceable"><code>masters</code></em> |<br>
 489                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
 490                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
 491         };<br>
 492 <br>
 493         database <em class="replaceable"><code>string</code></em>;<br>
 494         delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
 495         check-names ( fail | warn | ignore );<br>
 496         check-mx ( fail | warn | ignore );<br>
 497         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
 498         check-mx-cname ( fail | warn | ignore );<br>
 499         check-srv-cname ( fail | warn | ignore );<br>
 500         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
 501         ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
 502         journal <em class="replaceable"><code>quoted_string</code></em>;<br>
 503         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
 504 <br>
 505         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 506         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 507         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 508         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 509         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 510         update-policy {<br>
 511                 ( grant | deny ) <em class="replaceable"><code>string</code></em><br>
 512                 ( name | subdomain | wildcard | self | selfsub | selfwild |<br>
 513                   krb5-self | ms-self | krb5-subdomain | ms-subdomain |<br>
 514                   tcp-self | 6to4-self ) <em class="replaceable"><code>string</code></em><br>
 515                 <em class="replaceable"><code>rrtypelist</code></em>; ...<br>
 516         };<br>
 517         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
 518 <br>
 519         masterfile-format ( text | raw );<br>
 520         notify <em class="replaceable"><code>notifytype</code></em>;<br>
 521         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 522         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 523         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
 524         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
 525         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
 526                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
 527         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
 528 <br>
 529         forward ( first | only );<br>
 530         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
 531                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
 532         };<br>
 533 <br>
 534         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
 535         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
 536         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
 537         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
 538         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
 539         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
 540         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
 541         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
 542         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
 543         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
 544         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
 545 <br>
 546         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
 547                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 548         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
 549                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 550 <br>
 551         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
 552                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 553         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
 554                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
 555         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
 556 <br>
 557         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
 558         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
 559         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
 560 <br>
 561         nsec3-test-zone <em class="replaceable"><code>boolean</code></em>;  // testing only<br>
 562 <br>
 563         ixfr-base <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
 564         ixfr-tmp-file <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
 565         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
 566         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
 567         pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
 568 };<br>
 569 </p></div>
 570 </div>
 571 <div class="refsect1" lang="en">
 572 <a name="id2545410"></a><h2>FILES</h2>
 573 <p><code class="filename">/etc/named.conf</code>
 574     </p>
 575 </div>
 576 <div class="refsect1" lang="en">
 577 <a name="id2545421"></a><h2>SEE ALSO</h2>
 578 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
 579       <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
 580       <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
 581       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
 582     </p>
 583 </div>
 584 </div></body>
 585 </html>