]> CyberLeo.Net >> Repos - FreeBSD/releng/9.0.git/blob - contrib/bind9/bin/named/named.conf.html
Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
[FreeBSD/releng/9.0.git] / contrib / bind9 / bin / named / named.conf.html
1 <!--
2  - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC")
3  - 
4  - Permission to use, copy, modify, and/or distribute this software for any
5  - purpose with or without fee is hereby granted, provided that the above
6  - copyright notice and this permission notice appear in all copies.
7  - 
8  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
10  - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
12  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14  - PERFORMANCE OF THIS SOFTWARE.
15 -->
16 <!-- $Id: named.conf.html,v 1.53.12.1 2011-02-03 12:29:12 tbox Exp $ -->
17 <html>
18 <head>
19 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
20 <title>named.conf</title>
21 <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
22 </head>
23 <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
24 <a name="id2476275"></a><div class="titlepage"></div>
25 <div class="refnamediv">
26 <h2>Name</h2>
27 <p><code class="filename">named.conf</code> &#8212; configuration file for named</p>
28 </div>
29 <div class="refsynopsisdiv">
30 <h2>Synopsis</h2>
31 <div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
32 </div>
33 <div class="refsect1" lang="en">
34 <a name="id2543352"></a><h2>DESCRIPTION</h2>
35 <p><code class="filename">named.conf</code> is the configuration file
36       for
37       <span><strong class="command">named</strong></span>.  Statements are enclosed
38       in braces and terminated with a semi-colon.  Clauses in
39       the statements are also semi-colon terminated.  The usual
40       comment styles are supported:
41     </p>
42 <p>
43       C style: /* */
44     </p>
45 <p>
46       C++ style: // to end of line
47     </p>
48 <p>
49       Unix style: # to end of line
50     </p>
51 </div>
52 <div class="refsect1" lang="en">
53 <a name="id2543380"></a><h2>ACL</h2>
54 <div class="literallayout"><p><br>
55 acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
56 <br>
57 </p></div>
58 </div>
59 <div class="refsect1" lang="en">
60 <a name="id2543396"></a><h2>KEY</h2>
61 <div class="literallayout"><p><br>
62 key <em class="replaceable"><code>domain_name</code></em> {<br>
63         algorithm <em class="replaceable"><code>string</code></em>;<br>
64         secret <em class="replaceable"><code>string</code></em>;<br>
65 };<br>
66 </p></div>
67 </div>
68 <div class="refsect1" lang="en">
69 <a name="id2543415"></a><h2>MASTERS</h2>
70 <div class="literallayout"><p><br>
71 masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
72         ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
73         <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
74 };<br>
75 </p></div>
76 </div>
77 <div class="refsect1" lang="en">
78 <a name="id2543461"></a><h2>SERVER</h2>
79 <div class="literallayout"><p><br>
80 server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
81         bogus <em class="replaceable"><code>boolean</code></em>;<br>
82         edns <em class="replaceable"><code>boolean</code></em>;<br>
83         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
84         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
85         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
86         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
87         keys <em class="replaceable"><code>server_key</code></em>;<br>
88         transfers <em class="replaceable"><code>integer</code></em>;<br>
89         transfer-format ( many-answers | one-answer );<br>
90         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
91                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
92         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
93                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
94 <br>
95         support-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
96 };<br>
97 </p></div>
98 </div>
99 <div class="refsect1" lang="en">
100 <a name="id2543529"></a><h2>TRUSTED-KEYS</h2>
101 <div class="literallayout"><p><br>
102 trusted-keys {<br>
103         <em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
104 };<br>
105 </p></div>
106 </div>
107 <div class="refsect1" lang="en">
108 <a name="id2543555"></a><h2>MANAGED-KEYS</h2>
109 <div class="literallayout"><p><br>
110 managed-keys {<br>
111         <em class="replaceable"><code>domain_name</code></em> <code class="constant">initial-key</code> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
112 };<br>
113 </p></div>
114 </div>
115 <div class="refsect1" lang="en">
116 <a name="id2543584"></a><h2>CONTROLS</h2>
117 <div class="literallayout"><p><br>
118 controls {<br>
119         inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
120                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
121                 allow { <em class="replaceable"><code>address_match_element</code></em>; ... }<br>
122                 [<span class="optional"> keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
123         unix <em class="replaceable"><code>unsupported</code></em>; // not implemented<br>
124 };<br>
125 </p></div>
126 </div>
127 <div class="refsect1" lang="en">
128 <a name="id2543619"></a><h2>LOGGING</h2>
129 <div class="literallayout"><p><br>
130 logging {<br>
131         channel <em class="replaceable"><code>string</code></em> {<br>
132                 file <em class="replaceable"><code>log_file</code></em>;<br>
133                 syslog <em class="replaceable"><code>optional_facility</code></em>;<br>
134                 null;<br>
135                 stderr;<br>
136                 severity <em class="replaceable"><code>log_severity</code></em>;<br>
137                 print-time <em class="replaceable"><code>boolean</code></em>;<br>
138                 print-severity <em class="replaceable"><code>boolean</code></em>;<br>
139                 print-category <em class="replaceable"><code>boolean</code></em>;<br>
140         };<br>
141         category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
142 };<br>
143 </p></div>
144 </div>
145 <div class="refsect1" lang="en">
146 <a name="id2543657"></a><h2>LWRES</h2>
147 <div class="literallayout"><p><br>
148 lwres {<br>
149         listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
150                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
151         };<br>
152         view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em>;<br>
153         search { <em class="replaceable"><code>string</code></em>; ... };<br>
154         ndots <em class="replaceable"><code>integer</code></em>;<br>
155 };<br>
156 </p></div>
157 </div>
158 <div class="refsect1" lang="en">
159 <a name="id2543699"></a><h2>OPTIONS</h2>
160 <div class="literallayout"><p><br>
161 options {<br>
162         avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
163         avoid-v6-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
164         blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
165         coresize <em class="replaceable"><code>size</code></em>;<br>
166         datasize <em class="replaceable"><code>size</code></em>;<br>
167         directory <em class="replaceable"><code>quoted_string</code></em>;<br>
168         dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
169         files <em class="replaceable"><code>size</code></em>;<br>
170         heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
171         host-statistics <em class="replaceable"><code>boolean</code></em>; // not implemented<br>
172         host-statistics-max <em class="replaceable"><code>number</code></em>; // not implemented<br>
173         hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
174         interface-interval <em class="replaceable"><code>integer</code></em>;<br>
175         listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
176         listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
177         match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
178         memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
179         pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
180         port <em class="replaceable"><code>integer</code></em>;<br>
181         querylog <em class="replaceable"><code>boolean</code></em>;<br>
182         recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
183         reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
184         random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
185         recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
186         serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
187         server-id ( <em class="replaceable"><code>quoted_string</code></em> | none |;<br>
188         stacksize <em class="replaceable"><code>size</code></em>;<br>
189         statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
190         statistics-interval <em class="replaceable"><code>integer</code></em>; // not yet implemented<br>
191         tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
192         tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
193         tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
194         tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
195         tkey-gssapi-keytab <em class="replaceable"><code>quoted_string</code></em>;<br>
196         tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
197         transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
198         transfers-in <em class="replaceable"><code>integer</code></em>;<br>
199         transfers-out <em class="replaceable"><code>integer</code></em>;<br>
200         use-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
201         version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
202         allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
203         allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
204         sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
205         topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
206         auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
207         minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
208         recursion <em class="replaceable"><code>boolean</code></em>;<br>
209         rrset-order {<br>
210                 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
211                 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
212         };<br>
213         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
214         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
215         rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
216         additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
217         additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
218         query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
219         query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
220         use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
221         queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
222         queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
223         cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
224         resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
225         min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
226         lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
227         max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
228         max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
229         transfer-format ( many-answers | one-answer );<br>
230         max-cache-size <em class="replaceable"><code>size</code></em>;<br>
231         max-acache-size <em class="replaceable"><code>size</code></em>;<br>
232         clients-per-query <em class="replaceable"><code>number</code></em>;<br>
233         max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
234         check-names ( master | slave | response )<br>
235                 ( fail | warn | ignore );<br>
236         check-mx ( fail | warn | ignore );<br>
237         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
238         check-mx-cname ( fail | warn | ignore );<br>
239         check-srv-cname ( fail | warn | ignore );<br>
240         cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
241         suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
242         preferred-glue <em class="replaceable"><code>string</code></em>;<br>
243         dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
244                 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
245                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
246                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
247         };<br>
248         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
249         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
250         root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
251         disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
252         dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
253         dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
254         dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
255         dnssec-lookaside ( <em class="replaceable"><code>auto</code></em> | <em class="replaceable"><code>domain</code></em> trust-anchor <em class="replaceable"><code>domain</code></em> );<br>
256         dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
257         dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
258 <br>
259         dns64-server <em class="replaceable"><code>string</code></em>;<br>
260         dns64-contact <em class="replaceable"><code>string</code></em>;<br>
261         dns64 <em class="replaceable"><code>prefix</code></em> {<br>
262                 clients { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
263                 exclude { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
264                 mapped { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
265                 break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
266                 recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
267                 suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
268         };<br>
269 <br>
270         empty-server <em class="replaceable"><code>string</code></em>;<br>
271         empty-contact <em class="replaceable"><code>string</code></em>;<br>
272         empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
273         disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
274 <br>
275         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
276         ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
277 <br>
278         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
279         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
280         allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
281         allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
282         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
283         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
284         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
285         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
286         dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
287 <br>
288         masterfile-format ( text | raw );<br>
289         notify <em class="replaceable"><code>notifytype</code></em>;<br>
290         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
291         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
292         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
293         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
294         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
295                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
296         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
297 <br>
298         forward ( first | only );<br>
299         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
300                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
301         };<br>
302 <br>
303         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
304         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
305         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
306         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
307         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
308         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
309         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
310         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
311         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
312         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
313 <br>
314         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
315         sig-re-signing-interval <em class="replaceable"><code>integer</code></em>;<br>
316         sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
317         sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
318         sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
319 <br>
320         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
321                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
322         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
323                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
324 <br>
325         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
326                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
327         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
328                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
329         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
330 <br>
331         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
332         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
333         managed-keys-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
334         auto-dnssec <code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">create</code>|<code class="constant">off</code>;<br>
335         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
336         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
337         zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
338         dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
339         deny-answer-addresses {<br>
340                 <em class="replaceable"><code>address_match_list</code></em><br>
341         } [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];<br>
342         deny-answer-aliases {<br>
343                 <em class="replaceable"><code>namelist</code></em><br>
344         } [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];<br>
345 <br>
346         nsec3-test-zone <em class="replaceable"><code>boolean</code></em>;  // testing only<br>
347 <br>
348         allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
349         deallocate-on-exit <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
350         fake-iquery <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
351         fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
352         has-old-clients <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
353         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
354         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
355         multiple-cnames <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
356         named-xfer <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
357         serial-queries <em class="replaceable"><code>integer</code></em>; // obsolete<br>
358         treat-cr-as-space <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
359         use-id-pool <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
360 };<br>
361 </p></div>
362 </div>
363 <div class="refsect1" lang="en">
364 <a name="id2544577"></a><h2>VIEW</h2>
365 <div class="literallayout"><p><br>
366 view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
367         match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
368         match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
369         match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
370 <br>
371         key <em class="replaceable"><code>string</code></em> {<br>
372                 algorithm <em class="replaceable"><code>string</code></em>;<br>
373                 secret <em class="replaceable"><code>string</code></em>;<br>
374         };<br>
375 <br>
376         zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
377                 ...<br>
378         };<br>
379 <br>
380         server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
381                 ...<br>
382         };<br>
383 <br>
384         trusted-keys {<br>
385                 <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>;<br>
386                 [<span class="optional">...</span>]<br>
387         };<br>
388 <br>
389         allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
390         allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
391         sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
392         topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
393         auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
394         minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
395         recursion <em class="replaceable"><code>boolean</code></em>;<br>
396         rrset-order {<br>
397                 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
398                 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
399         };<br>
400         provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
401         request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
402         rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
403         additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
404         additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
405         query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
406         query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
407         use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
408         queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
409         queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
410         cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
411         resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
412         min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
413         lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
414         max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
415         max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
416         transfer-format ( many-answers | one-answer );<br>
417         max-cache-size <em class="replaceable"><code>size</code></em>;<br>
418         max-acache-size <em class="replaceable"><code>size</code></em>;<br>
419         clients-per-query <em class="replaceable"><code>number</code></em>;<br>
420         max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
421         check-names ( master | slave | response )<br>
422                 ( fail | warn | ignore );<br>
423         check-mx ( fail | warn | ignore );<br>
424         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
425         check-mx-cname ( fail | warn | ignore );<br>
426         check-srv-cname ( fail | warn | ignore );<br>
427         cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
428         suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
429         preferred-glue <em class="replaceable"><code>string</code></em>;<br>
430         dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
431                 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
432                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
433                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
434         };<br>
435         edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
436         max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
437         root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
438         disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
439         dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
440         dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
441         dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
442         dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
443         dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
444 <br>
445         dns64-server <em class="replaceable"><code>string</code></em>;<br>
446         dns64-contact <em class="replaceable"><code>string</code></em>;<br>
447         dns64 <em class="replaceable"><code>prefix</code></em> {<br>
448                 clients { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
449                 exclude { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
450                 mapped { <font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>; };<br>
451                 break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
452                 recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
453                 suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
454         };<br>
455 <br>
456         empty-server <em class="replaceable"><code>string</code></em>;<br>
457         empty-contact <em class="replaceable"><code>string</code></em>;<br>
458         empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
459         disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
460 <br>
461         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
462         ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
463 <br>
464         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
465         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
466         allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
467         allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
468         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
469         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
470         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
471         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
472         dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
473 <br>
474         masterfile-format ( text | raw );<br>
475         notify <em class="replaceable"><code>notifytype</code></em>;<br>
476         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
477         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
478         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
479         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
480         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
481                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
482         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
483 <br>
484         forward ( first | only );<br>
485         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
486                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
487         };<br>
488 <br>
489         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
490         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
491         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
492         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
493         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
494         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
495         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
496         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
497         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
498         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
499         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
500 <br>
501         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
502                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
503         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
504                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
505 <br>
506         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
507                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
508         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
509                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
510         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
511 <br>
512         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
513         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
514         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
515         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
516         zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
517         dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
518 <br>
519         allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
520         fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
521         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
522         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
523 };<br>
524 </p></div>
525 </div>
526 <div class="refsect1" lang="en">
527 <a name="id2545280"></a><h2>ZONE</h2>
528 <div class="literallayout"><p><br>
529 zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
530         type ( master | slave | stub | hint |<br>
531                 forward | delegation-only );<br>
532         file <em class="replaceable"><code>quoted_string</code></em>;<br>
533 <br>
534         masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
535                 ( <em class="replaceable"><code>masters</code></em> |<br>
536                 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
537                 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
538         };<br>
539 <br>
540         database <em class="replaceable"><code>string</code></em>;<br>
541         delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
542         check-names ( fail | warn | ignore );<br>
543         check-mx ( fail | warn | ignore );<br>
544         check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
545         check-mx-cname ( fail | warn | ignore );<br>
546         check-srv-cname ( fail | warn | ignore );<br>
547         dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
548         ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
549         journal <em class="replaceable"><code>quoted_string</code></em>;<br>
550         zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
551         dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
552 <br>
553         allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
554         allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
555         allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
556         allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
557         allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
558         update-policy <em class="replaceable"><code>local</code></em> | <em class="replaceable"><code> {<br>
559                 ( grant | deny ) <em class="replaceable"><code>string</code></em><br>
560                 ( name | subdomain | wildcard | self | selfsub | selfwild |<br>
561                   krb5-self | ms-self | krb5-subdomain | ms-subdomain |<br>
562                   tcp-self | zonesub | 6to4-self ) <em class="replaceable"><code>string</code></em><br>
563                 <em class="replaceable"><code>rrtypelist</code></em>;<br>
564                 [<span class="optional">...</span>]<br>
565         }</code></em>;<br>
566         update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
567         dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
568 <br>
569         masterfile-format ( text | raw );<br>
570         notify <em class="replaceable"><code>notifytype</code></em>;<br>
571         notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
572         notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
573         notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
574         notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
575         also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
576                 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
577         allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
578 <br>
579         forward ( first | only );<br>
580         forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
581                 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
582         };<br>
583 <br>
584         max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
585         max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
586         max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
587         max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
588         max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
589         max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
590         min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
591         max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
592         min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
593         multi-master <em class="replaceable"><code>boolean</code></em>;<br>
594         sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
595 <br>
596         transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
597                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
598         transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
599                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
600 <br>
601         alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
602                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
603         alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
604                 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
605         use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
606 <br>
607         zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
608         try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
609         key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
610 <br>
611         nsec3-test-zone <em class="replaceable"><code>boolean</code></em>;  // testing only<br>
612 <br>
613         ixfr-base <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
614         ixfr-tmp-file <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
615         maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
616         max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
617         pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
618 };<br>
619 </p></div>
620 </div>
621 <div class="refsect1" lang="en">
622 <a name="id2545659"></a><h2>FILES</h2>
623 <p><code class="filename">/etc/named.conf</code>
624     </p>
625 </div>
626 <div class="refsect1" lang="en">
627 <a name="id2545671"></a><h2>SEE ALSO</h2>
628 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
629       <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
630       <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
631       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
632     </p>
633 </div>
634 </div></body>
635 </html>