configparser.y revision 307729
1/*
2 * configparser.y -- yacc grammar for unbound configuration files
3 *
4 * Copyright (c) 2001-2006, NLnet Labs. All rights reserved.
5 *
6 * Copyright (c) 2007, NLnet Labs. All rights reserved.
7 *
8 * This software is open source.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * Redistributions of source code must retain the above copyright notice,
15 * this list of conditions and the following disclaimer.
16 *
17 * Redistributions in binary form must reproduce the above copyright notice,
18 * this list of conditions and the following disclaimer in the documentation
19 * and/or other materials provided with the distribution.
20 *
21 * Neither the name of the NLNET LABS nor the names of its contributors may
22 * be used to endorse or promote products derived from this software without
23 * specific prior written permission.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
26 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
27 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
28 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
29 * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
30 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
31 * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
32 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
33 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
34 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
35 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36 */
37
38%{
39#include "config.h"
40
41#include <stdarg.h>
42#include <stdio.h>
43#include <string.h>
44#include <stdlib.h>
45#include <assert.h>
46
47#include "util/configyyrename.h"
48#include "util/config_file.h"
49#include "util/net_help.h"
50
51int ub_c_lex(void);
52void ub_c_error(const char *message);
53
54/* these need to be global, otherwise they cannot be used inside yacc */
55extern struct config_parser_state* cfg_parser;
56
57#if 0
58#define OUTYY(s)  printf s /* used ONLY when debugging */
59#else
60#define OUTYY(s)
61#endif
62
63%}
64%union {
65	char*	str;
66};
67
68%token SPACE LETTER NEWLINE COMMENT COLON ANY ZONESTR
69%token <str> STRING_ARG
70%token VAR_SERVER VAR_VERBOSITY VAR_NUM_THREADS VAR_PORT
71%token VAR_OUTGOING_RANGE VAR_INTERFACE
72%token VAR_DO_IP4 VAR_DO_IP6 VAR_PREFER_IP6 VAR_DO_UDP VAR_DO_TCP
73%token VAR_TCP_MSS VAR_OUTGOING_TCP_MSS
74%token VAR_CHROOT VAR_USERNAME VAR_DIRECTORY VAR_LOGFILE VAR_PIDFILE
75%token VAR_MSG_CACHE_SIZE VAR_MSG_CACHE_SLABS VAR_NUM_QUERIES_PER_THREAD
76%token VAR_RRSET_CACHE_SIZE VAR_RRSET_CACHE_SLABS VAR_OUTGOING_NUM_TCP
77%token VAR_INFRA_HOST_TTL VAR_INFRA_LAME_TTL VAR_INFRA_CACHE_SLABS
78%token VAR_INFRA_CACHE_NUMHOSTS VAR_INFRA_CACHE_LAME_SIZE VAR_NAME
79%token VAR_STUB_ZONE VAR_STUB_HOST VAR_STUB_ADDR VAR_TARGET_FETCH_POLICY
80%token VAR_HARDEN_SHORT_BUFSIZE VAR_HARDEN_LARGE_QUERIES
81%token VAR_FORWARD_ZONE VAR_FORWARD_HOST VAR_FORWARD_ADDR
82%token VAR_DO_NOT_QUERY_ADDRESS VAR_HIDE_IDENTITY VAR_HIDE_VERSION
83%token VAR_IDENTITY VAR_VERSION VAR_HARDEN_GLUE VAR_MODULE_CONF
84%token VAR_TRUST_ANCHOR_FILE VAR_TRUST_ANCHOR VAR_VAL_OVERRIDE_DATE
85%token VAR_BOGUS_TTL VAR_VAL_CLEAN_ADDITIONAL VAR_VAL_PERMISSIVE_MODE
86%token VAR_INCOMING_NUM_TCP VAR_MSG_BUFFER_SIZE VAR_KEY_CACHE_SIZE
87%token VAR_KEY_CACHE_SLABS VAR_TRUSTED_KEYS_FILE
88%token VAR_VAL_NSEC3_KEYSIZE_ITERATIONS VAR_USE_SYSLOG
89%token VAR_OUTGOING_INTERFACE VAR_ROOT_HINTS VAR_DO_NOT_QUERY_LOCALHOST
90%token VAR_CACHE_MAX_TTL VAR_HARDEN_DNSSEC_STRIPPED VAR_ACCESS_CONTROL
91%token VAR_LOCAL_ZONE VAR_LOCAL_DATA VAR_INTERFACE_AUTOMATIC
92%token VAR_STATISTICS_INTERVAL VAR_DO_DAEMONIZE VAR_USE_CAPS_FOR_ID
93%token VAR_STATISTICS_CUMULATIVE VAR_OUTGOING_PORT_PERMIT
94%token VAR_OUTGOING_PORT_AVOID VAR_DLV_ANCHOR_FILE VAR_DLV_ANCHOR
95%token VAR_NEG_CACHE_SIZE VAR_HARDEN_REFERRAL_PATH VAR_PRIVATE_ADDRESS
96%token VAR_PRIVATE_DOMAIN VAR_REMOTE_CONTROL VAR_CONTROL_ENABLE
97%token VAR_CONTROL_INTERFACE VAR_CONTROL_PORT VAR_SERVER_KEY_FILE
98%token VAR_SERVER_CERT_FILE VAR_CONTROL_KEY_FILE VAR_CONTROL_CERT_FILE
99%token VAR_CONTROL_USE_CERT
100%token VAR_EXTENDED_STATISTICS VAR_LOCAL_DATA_PTR VAR_JOSTLE_TIMEOUT
101%token VAR_STUB_PRIME VAR_UNWANTED_REPLY_THRESHOLD VAR_LOG_TIME_ASCII
102%token VAR_DOMAIN_INSECURE VAR_PYTHON VAR_PYTHON_SCRIPT VAR_VAL_SIG_SKEW_MIN
103%token VAR_VAL_SIG_SKEW_MAX VAR_CACHE_MIN_TTL VAR_VAL_LOG_LEVEL
104%token VAR_AUTO_TRUST_ANCHOR_FILE VAR_KEEP_MISSING VAR_ADD_HOLDDOWN
105%token VAR_DEL_HOLDDOWN VAR_SO_RCVBUF VAR_EDNS_BUFFER_SIZE VAR_PREFETCH
106%token VAR_PREFETCH_KEY VAR_SO_SNDBUF VAR_SO_REUSEPORT VAR_HARDEN_BELOW_NXDOMAIN
107%token VAR_IGNORE_CD_FLAG VAR_LOG_QUERIES VAR_TCP_UPSTREAM VAR_SSL_UPSTREAM
108%token VAR_SSL_SERVICE_KEY VAR_SSL_SERVICE_PEM VAR_SSL_PORT VAR_FORWARD_FIRST
109%token VAR_STUB_FIRST VAR_MINIMAL_RESPONSES VAR_RRSET_ROUNDROBIN
110%token VAR_MAX_UDP_SIZE VAR_DELAY_CLOSE
111%token VAR_UNBLOCK_LAN_ZONES VAR_INSECURE_LAN_ZONES
112%token VAR_INFRA_CACHE_MIN_RTT
113%token VAR_DNS64_PREFIX VAR_DNS64_SYNTHALL
114%token VAR_DNSTAP VAR_DNSTAP_ENABLE VAR_DNSTAP_SOCKET_PATH
115%token VAR_DNSTAP_SEND_IDENTITY VAR_DNSTAP_SEND_VERSION
116%token VAR_DNSTAP_IDENTITY VAR_DNSTAP_VERSION
117%token VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES
118%token VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES
119%token VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES
120%token VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES
121%token VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES
122%token VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES
123%token VAR_HARDEN_ALGO_DOWNGRADE VAR_IP_TRANSPARENT
124%token VAR_DISABLE_DNSSEC_LAME_CHECK
125%token VAR_RATELIMIT VAR_RATELIMIT_SLABS VAR_RATELIMIT_SIZE
126%token VAR_RATELIMIT_FOR_DOMAIN VAR_RATELIMIT_BELOW_DOMAIN VAR_RATELIMIT_FACTOR
127%token VAR_CAPS_WHITELIST VAR_CACHE_MAX_NEGATIVE_TTL VAR_PERMIT_SMALL_HOLDDOWN
128%token VAR_QNAME_MINIMISATION VAR_IP_FREEBIND VAR_DEFINE_TAG VAR_LOCAL_ZONE_TAG
129%token VAR_ACCESS_CONTROL_TAG VAR_LOCAL_ZONE_OVERRIDE
130%token VAR_ACCESS_CONTROL_TAG_ACTION VAR_ACCESS_CONTROL_TAG_DATA
131
132%%
133toplevelvars: /* empty */ | toplevelvars toplevelvar ;
134toplevelvar: serverstart contents_server | stubstart contents_stub |
135	forwardstart contents_forward | pythonstart contents_py |
136	rcstart contents_rc | dtstart contents_dt
137	;
138
139/* server: declaration */
140serverstart: VAR_SERVER
141	{
142		OUTYY(("\nP(server:)\n"));
143	}
144	;
145contents_server: contents_server content_server
146	| ;
147content_server: server_num_threads | server_verbosity | server_port |
148	server_outgoing_range | server_do_ip4 |
149	server_do_ip6 | server_prefer_ip6 |
150	server_do_udp | server_do_tcp |
151	server_tcp_mss | server_outgoing_tcp_mss |
152	server_interface | server_chroot | server_username |
153	server_directory | server_logfile | server_pidfile |
154	server_msg_cache_size | server_msg_cache_slabs |
155	server_num_queries_per_thread | server_rrset_cache_size |
156	server_rrset_cache_slabs | server_outgoing_num_tcp |
157	server_infra_host_ttl | server_infra_lame_ttl |
158	server_infra_cache_slabs | server_infra_cache_numhosts |
159	server_infra_cache_lame_size | server_target_fetch_policy |
160	server_harden_short_bufsize | server_harden_large_queries |
161	server_do_not_query_address | server_hide_identity |
162	server_hide_version | server_identity | server_version |
163	server_harden_glue | server_module_conf | server_trust_anchor_file |
164	server_trust_anchor | server_val_override_date | server_bogus_ttl |
165	server_val_clean_additional | server_val_permissive_mode |
166	server_incoming_num_tcp | server_msg_buffer_size |
167	server_key_cache_size | server_key_cache_slabs |
168	server_trusted_keys_file | server_val_nsec3_keysize_iterations |
169	server_use_syslog | server_outgoing_interface | server_root_hints |
170	server_do_not_query_localhost | server_cache_max_ttl |
171	server_harden_dnssec_stripped | server_access_control |
172	server_local_zone | server_local_data | server_interface_automatic |
173	server_statistics_interval | server_do_daemonize |
174	server_use_caps_for_id | server_statistics_cumulative |
175	server_outgoing_port_permit | server_outgoing_port_avoid |
176	server_dlv_anchor_file | server_dlv_anchor | server_neg_cache_size |
177	server_harden_referral_path | server_private_address |
178	server_private_domain | server_extended_statistics |
179	server_local_data_ptr | server_jostle_timeout |
180	server_unwanted_reply_threshold | server_log_time_ascii |
181	server_domain_insecure | server_val_sig_skew_min |
182	server_val_sig_skew_max | server_cache_min_ttl | server_val_log_level |
183	server_auto_trust_anchor_file | server_add_holddown |
184	server_del_holddown | server_keep_missing | server_so_rcvbuf |
185	server_edns_buffer_size | server_prefetch | server_prefetch_key |
186	server_so_sndbuf | server_harden_below_nxdomain | server_ignore_cd_flag |
187	server_log_queries | server_tcp_upstream | server_ssl_upstream |
188	server_ssl_service_key | server_ssl_service_pem | server_ssl_port |
189	server_minimal_responses | server_rrset_roundrobin | server_max_udp_size |
190	server_so_reuseport | server_delay_close |
191	server_unblock_lan_zones | server_insecure_lan_zones |
192	server_dns64_prefix | server_dns64_synthall |
193	server_infra_cache_min_rtt | server_harden_algo_downgrade |
194	server_ip_transparent | server_ratelimit | server_ratelimit_slabs |
195	server_ratelimit_size | server_ratelimit_for_domain |
196	server_ratelimit_below_domain | server_ratelimit_factor |
197	server_caps_whitelist | server_cache_max_negative_ttl |
198	server_permit_small_holddown | server_qname_minimisation |
199	server_ip_freebind | server_define_tag | server_local_zone_tag |
200	server_disable_dnssec_lame_check | server_access_control_tag |
201	server_local_zone_override | server_access_control_tag_action |
202	server_access_control_tag_data
203	;
204stubstart: VAR_STUB_ZONE
205	{
206		struct config_stub* s;
207		OUTYY(("\nP(stub_zone:)\n"));
208		s = (struct config_stub*)calloc(1, sizeof(struct config_stub));
209		if(s) {
210			s->next = cfg_parser->cfg->stubs;
211			cfg_parser->cfg->stubs = s;
212		} else
213			yyerror("out of memory");
214	}
215	;
216contents_stub: contents_stub content_stub
217	| ;
218content_stub: stub_name | stub_host | stub_addr | stub_prime | stub_first
219	;
220forwardstart: VAR_FORWARD_ZONE
221	{
222		struct config_stub* s;
223		OUTYY(("\nP(forward_zone:)\n"));
224		s = (struct config_stub*)calloc(1, sizeof(struct config_stub));
225		if(s) {
226			s->next = cfg_parser->cfg->forwards;
227			cfg_parser->cfg->forwards = s;
228		} else
229			yyerror("out of memory");
230	}
231	;
232contents_forward: contents_forward content_forward
233	| ;
234content_forward: forward_name | forward_host | forward_addr | forward_first
235	;
236server_num_threads: VAR_NUM_THREADS STRING_ARG
237	{
238		OUTYY(("P(server_num_threads:%s)\n", $2));
239		if(atoi($2) == 0 && strcmp($2, "0") != 0)
240			yyerror("number expected");
241		else cfg_parser->cfg->num_threads = atoi($2);
242		free($2);
243	}
244	;
245server_verbosity: VAR_VERBOSITY STRING_ARG
246	{
247		OUTYY(("P(server_verbosity:%s)\n", $2));
248		if(atoi($2) == 0 && strcmp($2, "0") != 0)
249			yyerror("number expected");
250		else cfg_parser->cfg->verbosity = atoi($2);
251		free($2);
252	}
253	;
254server_statistics_interval: VAR_STATISTICS_INTERVAL STRING_ARG
255	{
256		OUTYY(("P(server_statistics_interval:%s)\n", $2));
257		if(strcmp($2, "") == 0 || strcmp($2, "0") == 0)
258			cfg_parser->cfg->stat_interval = 0;
259		else if(atoi($2) == 0)
260			yyerror("number expected");
261		else cfg_parser->cfg->stat_interval = atoi($2);
262		free($2);
263	}
264	;
265server_statistics_cumulative: VAR_STATISTICS_CUMULATIVE STRING_ARG
266	{
267		OUTYY(("P(server_statistics_cumulative:%s)\n", $2));
268		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
269			yyerror("expected yes or no.");
270		else cfg_parser->cfg->stat_cumulative = (strcmp($2, "yes")==0);
271		free($2);
272	}
273	;
274server_extended_statistics: VAR_EXTENDED_STATISTICS STRING_ARG
275	{
276		OUTYY(("P(server_extended_statistics:%s)\n", $2));
277		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
278			yyerror("expected yes or no.");
279		else cfg_parser->cfg->stat_extended = (strcmp($2, "yes")==0);
280		free($2);
281	}
282	;
283server_port: VAR_PORT STRING_ARG
284	{
285		OUTYY(("P(server_port:%s)\n", $2));
286		if(atoi($2) == 0)
287			yyerror("port number expected");
288		else cfg_parser->cfg->port = atoi($2);
289		free($2);
290	}
291	;
292server_interface: VAR_INTERFACE STRING_ARG
293	{
294		OUTYY(("P(server_interface:%s)\n", $2));
295		if(cfg_parser->cfg->num_ifs == 0)
296			cfg_parser->cfg->ifs = calloc(1, sizeof(char*));
297		else 	cfg_parser->cfg->ifs = realloc(cfg_parser->cfg->ifs,
298				(cfg_parser->cfg->num_ifs+1)*sizeof(char*));
299		if(!cfg_parser->cfg->ifs)
300			yyerror("out of memory");
301		else
302			cfg_parser->cfg->ifs[cfg_parser->cfg->num_ifs++] = $2;
303	}
304	;
305server_outgoing_interface: VAR_OUTGOING_INTERFACE STRING_ARG
306	{
307		OUTYY(("P(server_outgoing_interface:%s)\n", $2));
308		if(cfg_parser->cfg->num_out_ifs == 0)
309			cfg_parser->cfg->out_ifs = calloc(1, sizeof(char*));
310		else 	cfg_parser->cfg->out_ifs = realloc(
311			cfg_parser->cfg->out_ifs,
312			(cfg_parser->cfg->num_out_ifs+1)*sizeof(char*));
313		if(!cfg_parser->cfg->out_ifs)
314			yyerror("out of memory");
315		else
316			cfg_parser->cfg->out_ifs[
317				cfg_parser->cfg->num_out_ifs++] = $2;
318	}
319	;
320server_outgoing_range: VAR_OUTGOING_RANGE STRING_ARG
321	{
322		OUTYY(("P(server_outgoing_range:%s)\n", $2));
323		if(atoi($2) == 0)
324			yyerror("number expected");
325		else cfg_parser->cfg->outgoing_num_ports = atoi($2);
326		free($2);
327	}
328	;
329server_outgoing_port_permit: VAR_OUTGOING_PORT_PERMIT STRING_ARG
330	{
331		OUTYY(("P(server_outgoing_port_permit:%s)\n", $2));
332		if(!cfg_mark_ports($2, 1,
333			cfg_parser->cfg->outgoing_avail_ports, 65536))
334			yyerror("port number or range (\"low-high\") expected");
335		free($2);
336	}
337	;
338server_outgoing_port_avoid: VAR_OUTGOING_PORT_AVOID STRING_ARG
339	{
340		OUTYY(("P(server_outgoing_port_avoid:%s)\n", $2));
341		if(!cfg_mark_ports($2, 0,
342			cfg_parser->cfg->outgoing_avail_ports, 65536))
343			yyerror("port number or range (\"low-high\") expected");
344		free($2);
345	}
346	;
347server_outgoing_num_tcp: VAR_OUTGOING_NUM_TCP STRING_ARG
348	{
349		OUTYY(("P(server_outgoing_num_tcp:%s)\n", $2));
350		if(atoi($2) == 0 && strcmp($2, "0") != 0)
351			yyerror("number expected");
352		else cfg_parser->cfg->outgoing_num_tcp = atoi($2);
353		free($2);
354	}
355	;
356server_incoming_num_tcp: VAR_INCOMING_NUM_TCP STRING_ARG
357	{
358		OUTYY(("P(server_incoming_num_tcp:%s)\n", $2));
359		if(atoi($2) == 0 && strcmp($2, "0") != 0)
360			yyerror("number expected");
361		else cfg_parser->cfg->incoming_num_tcp = atoi($2);
362		free($2);
363	}
364	;
365server_interface_automatic: VAR_INTERFACE_AUTOMATIC STRING_ARG
366	{
367		OUTYY(("P(server_interface_automatic:%s)\n", $2));
368		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
369			yyerror("expected yes or no.");
370		else cfg_parser->cfg->if_automatic = (strcmp($2, "yes")==0);
371		free($2);
372	}
373	;
374server_do_ip4: VAR_DO_IP4 STRING_ARG
375	{
376		OUTYY(("P(server_do_ip4:%s)\n", $2));
377		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
378			yyerror("expected yes or no.");
379		else cfg_parser->cfg->do_ip4 = (strcmp($2, "yes")==0);
380		free($2);
381	}
382	;
383server_do_ip6: VAR_DO_IP6 STRING_ARG
384	{
385		OUTYY(("P(server_do_ip6:%s)\n", $2));
386		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
387			yyerror("expected yes or no.");
388		else cfg_parser->cfg->do_ip6 = (strcmp($2, "yes")==0);
389		free($2);
390	}
391	;
392server_do_udp: VAR_DO_UDP STRING_ARG
393	{
394		OUTYY(("P(server_do_udp:%s)\n", $2));
395		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
396			yyerror("expected yes or no.");
397		else cfg_parser->cfg->do_udp = (strcmp($2, "yes")==0);
398		free($2);
399	}
400	;
401server_do_tcp: VAR_DO_TCP STRING_ARG
402	{
403		OUTYY(("P(server_do_tcp:%s)\n", $2));
404		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
405			yyerror("expected yes or no.");
406		else cfg_parser->cfg->do_tcp = (strcmp($2, "yes")==0);
407		free($2);
408	}
409	;
410server_prefer_ip6: VAR_PREFER_IP6 STRING_ARG
411	{
412		OUTYY(("P(server_prefer_ip6:%s)\n", $2));
413		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
414			yyerror("expected yes or no.");
415		else cfg_parser->cfg->prefer_ip6 = (strcmp($2, "yes")==0);
416		free($2);
417	}
418	;
419server_tcp_mss: VAR_TCP_MSS STRING_ARG
420	{
421		OUTYY(("P(server_tcp_mss:%s)\n", $2));
422                if(atoi($2) == 0 && strcmp($2, "0") != 0)
423                        yyerror("number expected");
424                else cfg_parser->cfg->tcp_mss = atoi($2);
425                free($2);
426	}
427	;
428server_outgoing_tcp_mss: VAR_OUTGOING_TCP_MSS STRING_ARG
429	{
430		OUTYY(("P(server_outgoing_tcp_mss:%s)\n", $2));
431		if(atoi($2) == 0 && strcmp($2, "0") != 0)
432			yyerror("number expected");
433		else cfg_parser->cfg->outgoing_tcp_mss = atoi($2);
434		free($2);
435	}
436	;
437server_tcp_upstream: VAR_TCP_UPSTREAM STRING_ARG
438	{
439		OUTYY(("P(server_tcp_upstream:%s)\n", $2));
440		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
441			yyerror("expected yes or no.");
442		else cfg_parser->cfg->tcp_upstream = (strcmp($2, "yes")==0);
443		free($2);
444	}
445	;
446server_ssl_upstream: VAR_SSL_UPSTREAM STRING_ARG
447	{
448		OUTYY(("P(server_ssl_upstream:%s)\n", $2));
449		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
450			yyerror("expected yes or no.");
451		else cfg_parser->cfg->ssl_upstream = (strcmp($2, "yes")==0);
452		free($2);
453	}
454	;
455server_ssl_service_key: VAR_SSL_SERVICE_KEY STRING_ARG
456	{
457		OUTYY(("P(server_ssl_service_key:%s)\n", $2));
458		free(cfg_parser->cfg->ssl_service_key);
459		cfg_parser->cfg->ssl_service_key = $2;
460	}
461	;
462server_ssl_service_pem: VAR_SSL_SERVICE_PEM STRING_ARG
463	{
464		OUTYY(("P(server_ssl_service_pem:%s)\n", $2));
465		free(cfg_parser->cfg->ssl_service_pem);
466		cfg_parser->cfg->ssl_service_pem = $2;
467	}
468	;
469server_ssl_port: VAR_SSL_PORT STRING_ARG
470	{
471		OUTYY(("P(server_ssl_port:%s)\n", $2));
472		if(atoi($2) == 0)
473			yyerror("port number expected");
474		else cfg_parser->cfg->ssl_port = atoi($2);
475		free($2);
476	}
477	;
478server_do_daemonize: VAR_DO_DAEMONIZE STRING_ARG
479	{
480		OUTYY(("P(server_do_daemonize:%s)\n", $2));
481		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
482			yyerror("expected yes or no.");
483		else cfg_parser->cfg->do_daemonize = (strcmp($2, "yes")==0);
484		free($2);
485	}
486	;
487server_use_syslog: VAR_USE_SYSLOG STRING_ARG
488	{
489		OUTYY(("P(server_use_syslog:%s)\n", $2));
490		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
491			yyerror("expected yes or no.");
492		else cfg_parser->cfg->use_syslog = (strcmp($2, "yes")==0);
493#if !defined(HAVE_SYSLOG_H) && !defined(UB_ON_WINDOWS)
494		if(strcmp($2, "yes") == 0)
495			yyerror("no syslog services are available. "
496				"(reconfigure and compile to add)");
497#endif
498		free($2);
499	}
500	;
501server_log_time_ascii: VAR_LOG_TIME_ASCII STRING_ARG
502	{
503		OUTYY(("P(server_log_time_ascii:%s)\n", $2));
504		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
505			yyerror("expected yes or no.");
506		else cfg_parser->cfg->log_time_ascii = (strcmp($2, "yes")==0);
507		free($2);
508	}
509	;
510server_log_queries: VAR_LOG_QUERIES STRING_ARG
511	{
512		OUTYY(("P(server_log_queries:%s)\n", $2));
513		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
514			yyerror("expected yes or no.");
515		else cfg_parser->cfg->log_queries = (strcmp($2, "yes")==0);
516		free($2);
517	}
518	;
519server_chroot: VAR_CHROOT STRING_ARG
520	{
521		OUTYY(("P(server_chroot:%s)\n", $2));
522		free(cfg_parser->cfg->chrootdir);
523		cfg_parser->cfg->chrootdir = $2;
524	}
525	;
526server_username: VAR_USERNAME STRING_ARG
527	{
528		OUTYY(("P(server_username:%s)\n", $2));
529		free(cfg_parser->cfg->username);
530		cfg_parser->cfg->username = $2;
531	}
532	;
533server_directory: VAR_DIRECTORY STRING_ARG
534	{
535		OUTYY(("P(server_directory:%s)\n", $2));
536		free(cfg_parser->cfg->directory);
537		cfg_parser->cfg->directory = $2;
538		/* change there right away for includes relative to this */
539		if($2[0]) {
540			char* d;
541#ifdef UB_ON_WINDOWS
542			w_config_adjust_directory(cfg_parser->cfg);
543#endif
544			d = cfg_parser->cfg->directory;
545			/* adjust directory if we have already chroot,
546			 * like, we reread after sighup */
547			if(cfg_parser->chroot && cfg_parser->chroot[0] &&
548				strncmp(d, cfg_parser->chroot, strlen(
549				cfg_parser->chroot)) == 0)
550				d += strlen(cfg_parser->chroot);
551			if(chdir(d))
552				log_err("cannot chdir to directory: %s (%s)",
553					d, strerror(errno));
554		}
555	}
556	;
557server_logfile: VAR_LOGFILE STRING_ARG
558	{
559		OUTYY(("P(server_logfile:%s)\n", $2));
560		free(cfg_parser->cfg->logfile);
561		cfg_parser->cfg->logfile = $2;
562		cfg_parser->cfg->use_syslog = 0;
563	}
564	;
565server_pidfile: VAR_PIDFILE STRING_ARG
566	{
567		OUTYY(("P(server_pidfile:%s)\n", $2));
568		free(cfg_parser->cfg->pidfile);
569		cfg_parser->cfg->pidfile = $2;
570	}
571	;
572server_root_hints: VAR_ROOT_HINTS STRING_ARG
573	{
574		OUTYY(("P(server_root_hints:%s)\n", $2));
575		if(!cfg_strlist_insert(&cfg_parser->cfg->root_hints, $2))
576			yyerror("out of memory");
577	}
578	;
579server_dlv_anchor_file: VAR_DLV_ANCHOR_FILE STRING_ARG
580	{
581		OUTYY(("P(server_dlv_anchor_file:%s)\n", $2));
582		free(cfg_parser->cfg->dlv_anchor_file);
583		cfg_parser->cfg->dlv_anchor_file = $2;
584	}
585	;
586server_dlv_anchor: VAR_DLV_ANCHOR STRING_ARG
587	{
588		OUTYY(("P(server_dlv_anchor:%s)\n", $2));
589		if(!cfg_strlist_insert(&cfg_parser->cfg->dlv_anchor_list, $2))
590			yyerror("out of memory");
591	}
592	;
593server_auto_trust_anchor_file: VAR_AUTO_TRUST_ANCHOR_FILE STRING_ARG
594	{
595		OUTYY(("P(server_auto_trust_anchor_file:%s)\n", $2));
596		if(!cfg_strlist_insert(&cfg_parser->cfg->
597			auto_trust_anchor_file_list, $2))
598			yyerror("out of memory");
599	}
600	;
601server_trust_anchor_file: VAR_TRUST_ANCHOR_FILE STRING_ARG
602	{
603		OUTYY(("P(server_trust_anchor_file:%s)\n", $2));
604		if(!cfg_strlist_insert(&cfg_parser->cfg->
605			trust_anchor_file_list, $2))
606			yyerror("out of memory");
607	}
608	;
609server_trusted_keys_file: VAR_TRUSTED_KEYS_FILE STRING_ARG
610	{
611		OUTYY(("P(server_trusted_keys_file:%s)\n", $2));
612		if(!cfg_strlist_insert(&cfg_parser->cfg->
613			trusted_keys_file_list, $2))
614			yyerror("out of memory");
615	}
616	;
617server_trust_anchor: VAR_TRUST_ANCHOR STRING_ARG
618	{
619		OUTYY(("P(server_trust_anchor:%s)\n", $2));
620		if(!cfg_strlist_insert(&cfg_parser->cfg->trust_anchor_list, $2))
621			yyerror("out of memory");
622	}
623	;
624server_domain_insecure: VAR_DOMAIN_INSECURE STRING_ARG
625	{
626		OUTYY(("P(server_domain_insecure:%s)\n", $2));
627		if(!cfg_strlist_insert(&cfg_parser->cfg->domain_insecure, $2))
628			yyerror("out of memory");
629	}
630	;
631server_hide_identity: VAR_HIDE_IDENTITY STRING_ARG
632	{
633		OUTYY(("P(server_hide_identity:%s)\n", $2));
634		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
635			yyerror("expected yes or no.");
636		else cfg_parser->cfg->hide_identity = (strcmp($2, "yes")==0);
637		free($2);
638	}
639	;
640server_hide_version: VAR_HIDE_VERSION STRING_ARG
641	{
642		OUTYY(("P(server_hide_version:%s)\n", $2));
643		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
644			yyerror("expected yes or no.");
645		else cfg_parser->cfg->hide_version = (strcmp($2, "yes")==0);
646		free($2);
647	}
648	;
649server_identity: VAR_IDENTITY STRING_ARG
650	{
651		OUTYY(("P(server_identity:%s)\n", $2));
652		free(cfg_parser->cfg->identity);
653		cfg_parser->cfg->identity = $2;
654	}
655	;
656server_version: VAR_VERSION STRING_ARG
657	{
658		OUTYY(("P(server_version:%s)\n", $2));
659		free(cfg_parser->cfg->version);
660		cfg_parser->cfg->version = $2;
661	}
662	;
663server_so_rcvbuf: VAR_SO_RCVBUF STRING_ARG
664	{
665		OUTYY(("P(server_so_rcvbuf:%s)\n", $2));
666		if(!cfg_parse_memsize($2, &cfg_parser->cfg->so_rcvbuf))
667			yyerror("buffer size expected");
668		free($2);
669	}
670	;
671server_so_sndbuf: VAR_SO_SNDBUF STRING_ARG
672	{
673		OUTYY(("P(server_so_sndbuf:%s)\n", $2));
674		if(!cfg_parse_memsize($2, &cfg_parser->cfg->so_sndbuf))
675			yyerror("buffer size expected");
676		free($2);
677	}
678	;
679server_so_reuseport: VAR_SO_REUSEPORT STRING_ARG
680    {
681        OUTYY(("P(server_so_reuseport:%s)\n", $2));
682        if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
683            yyerror("expected yes or no.");
684        else cfg_parser->cfg->so_reuseport =
685            (strcmp($2, "yes")==0);
686        free($2);
687    }
688    ;
689server_ip_transparent: VAR_IP_TRANSPARENT STRING_ARG
690    {
691        OUTYY(("P(server_ip_transparent:%s)\n", $2));
692        if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
693            yyerror("expected yes or no.");
694        else cfg_parser->cfg->ip_transparent =
695            (strcmp($2, "yes")==0);
696        free($2);
697    }
698    ;
699server_ip_freebind: VAR_IP_FREEBIND STRING_ARG
700    {
701        OUTYY(("P(server_ip_freebind:%s)\n", $2));
702        if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
703            yyerror("expected yes or no.");
704        else cfg_parser->cfg->ip_freebind =
705            (strcmp($2, "yes")==0);
706        free($2);
707    }
708    ;
709server_edns_buffer_size: VAR_EDNS_BUFFER_SIZE STRING_ARG
710	{
711		OUTYY(("P(server_edns_buffer_size:%s)\n", $2));
712		if(atoi($2) == 0)
713			yyerror("number expected");
714		else if (atoi($2) < 12)
715			yyerror("edns buffer size too small");
716		else if (atoi($2) > 65535)
717			cfg_parser->cfg->edns_buffer_size = 65535;
718		else cfg_parser->cfg->edns_buffer_size = atoi($2);
719		free($2);
720	}
721	;
722server_msg_buffer_size: VAR_MSG_BUFFER_SIZE STRING_ARG
723	{
724		OUTYY(("P(server_msg_buffer_size:%s)\n", $2));
725		if(atoi($2) == 0)
726			yyerror("number expected");
727		else if (atoi($2) < 4096)
728			yyerror("message buffer size too small (use 4096)");
729		else cfg_parser->cfg->msg_buffer_size = atoi($2);
730		free($2);
731	}
732	;
733server_msg_cache_size: VAR_MSG_CACHE_SIZE STRING_ARG
734	{
735		OUTYY(("P(server_msg_cache_size:%s)\n", $2));
736		if(!cfg_parse_memsize($2, &cfg_parser->cfg->msg_cache_size))
737			yyerror("memory size expected");
738		free($2);
739	}
740	;
741server_msg_cache_slabs: VAR_MSG_CACHE_SLABS STRING_ARG
742	{
743		OUTYY(("P(server_msg_cache_slabs:%s)\n", $2));
744		if(atoi($2) == 0)
745			yyerror("number expected");
746		else {
747			cfg_parser->cfg->msg_cache_slabs = atoi($2);
748			if(!is_pow2(cfg_parser->cfg->msg_cache_slabs))
749				yyerror("must be a power of 2");
750		}
751		free($2);
752	}
753	;
754server_num_queries_per_thread: VAR_NUM_QUERIES_PER_THREAD STRING_ARG
755	{
756		OUTYY(("P(server_num_queries_per_thread:%s)\n", $2));
757		if(atoi($2) == 0)
758			yyerror("number expected");
759		else cfg_parser->cfg->num_queries_per_thread = atoi($2);
760		free($2);
761	}
762	;
763server_jostle_timeout: VAR_JOSTLE_TIMEOUT STRING_ARG
764	{
765		OUTYY(("P(server_jostle_timeout:%s)\n", $2));
766		if(atoi($2) == 0 && strcmp($2, "0") != 0)
767			yyerror("number expected");
768		else cfg_parser->cfg->jostle_time = atoi($2);
769		free($2);
770	}
771	;
772server_delay_close: VAR_DELAY_CLOSE STRING_ARG
773	{
774		OUTYY(("P(server_delay_close:%s)\n", $2));
775		if(atoi($2) == 0 && strcmp($2, "0") != 0)
776			yyerror("number expected");
777		else cfg_parser->cfg->delay_close = atoi($2);
778		free($2);
779	}
780	;
781server_unblock_lan_zones: VAR_UNBLOCK_LAN_ZONES STRING_ARG
782	{
783		OUTYY(("P(server_unblock_lan_zones:%s)\n", $2));
784		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
785			yyerror("expected yes or no.");
786		else cfg_parser->cfg->unblock_lan_zones =
787			(strcmp($2, "yes")==0);
788		free($2);
789	}
790	;
791server_insecure_lan_zones: VAR_INSECURE_LAN_ZONES STRING_ARG
792	{
793		OUTYY(("P(server_insecure_lan_zones:%s)\n", $2));
794		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
795			yyerror("expected yes or no.");
796		else cfg_parser->cfg->insecure_lan_zones =
797			(strcmp($2, "yes")==0);
798		free($2);
799	}
800	;
801server_rrset_cache_size: VAR_RRSET_CACHE_SIZE STRING_ARG
802	{
803		OUTYY(("P(server_rrset_cache_size:%s)\n", $2));
804		if(!cfg_parse_memsize($2, &cfg_parser->cfg->rrset_cache_size))
805			yyerror("memory size expected");
806		free($2);
807	}
808	;
809server_rrset_cache_slabs: VAR_RRSET_CACHE_SLABS STRING_ARG
810	{
811		OUTYY(("P(server_rrset_cache_slabs:%s)\n", $2));
812		if(atoi($2) == 0)
813			yyerror("number expected");
814		else {
815			cfg_parser->cfg->rrset_cache_slabs = atoi($2);
816			if(!is_pow2(cfg_parser->cfg->rrset_cache_slabs))
817				yyerror("must be a power of 2");
818		}
819		free($2);
820	}
821	;
822server_infra_host_ttl: VAR_INFRA_HOST_TTL STRING_ARG
823	{
824		OUTYY(("P(server_infra_host_ttl:%s)\n", $2));
825		if(atoi($2) == 0 && strcmp($2, "0") != 0)
826			yyerror("number expected");
827		else cfg_parser->cfg->host_ttl = atoi($2);
828		free($2);
829	}
830	;
831server_infra_lame_ttl: VAR_INFRA_LAME_TTL STRING_ARG
832	{
833		OUTYY(("P(server_infra_lame_ttl:%s)\n", $2));
834		verbose(VERB_DETAIL, "ignored infra-lame-ttl: %s (option "
835			"removed, use infra-host-ttl)", $2);
836		free($2);
837	}
838	;
839server_infra_cache_numhosts: VAR_INFRA_CACHE_NUMHOSTS STRING_ARG
840	{
841		OUTYY(("P(server_infra_cache_numhosts:%s)\n", $2));
842		if(atoi($2) == 0)
843			yyerror("number expected");
844		else cfg_parser->cfg->infra_cache_numhosts = atoi($2);
845		free($2);
846	}
847	;
848server_infra_cache_lame_size: VAR_INFRA_CACHE_LAME_SIZE STRING_ARG
849	{
850		OUTYY(("P(server_infra_cache_lame_size:%s)\n", $2));
851		verbose(VERB_DETAIL, "ignored infra-cache-lame-size: %s "
852			"(option removed, use infra-cache-numhosts)", $2);
853		free($2);
854	}
855	;
856server_infra_cache_slabs: VAR_INFRA_CACHE_SLABS STRING_ARG
857	{
858		OUTYY(("P(server_infra_cache_slabs:%s)\n", $2));
859		if(atoi($2) == 0)
860			yyerror("number expected");
861		else {
862			cfg_parser->cfg->infra_cache_slabs = atoi($2);
863			if(!is_pow2(cfg_parser->cfg->infra_cache_slabs))
864				yyerror("must be a power of 2");
865		}
866		free($2);
867	}
868	;
869server_infra_cache_min_rtt: VAR_INFRA_CACHE_MIN_RTT STRING_ARG
870	{
871		OUTYY(("P(server_infra_cache_min_rtt:%s)\n", $2));
872		if(atoi($2) == 0 && strcmp($2, "0") != 0)
873			yyerror("number expected");
874		else cfg_parser->cfg->infra_cache_min_rtt = atoi($2);
875		free($2);
876	}
877	;
878server_target_fetch_policy: VAR_TARGET_FETCH_POLICY STRING_ARG
879	{
880		OUTYY(("P(server_target_fetch_policy:%s)\n", $2));
881		free(cfg_parser->cfg->target_fetch_policy);
882		cfg_parser->cfg->target_fetch_policy = $2;
883	}
884	;
885server_harden_short_bufsize: VAR_HARDEN_SHORT_BUFSIZE STRING_ARG
886	{
887		OUTYY(("P(server_harden_short_bufsize:%s)\n", $2));
888		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
889			yyerror("expected yes or no.");
890		else cfg_parser->cfg->harden_short_bufsize =
891			(strcmp($2, "yes")==0);
892		free($2);
893	}
894	;
895server_harden_large_queries: VAR_HARDEN_LARGE_QUERIES STRING_ARG
896	{
897		OUTYY(("P(server_harden_large_queries:%s)\n", $2));
898		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
899			yyerror("expected yes or no.");
900		else cfg_parser->cfg->harden_large_queries =
901			(strcmp($2, "yes")==0);
902		free($2);
903	}
904	;
905server_harden_glue: VAR_HARDEN_GLUE STRING_ARG
906	{
907		OUTYY(("P(server_harden_glue:%s)\n", $2));
908		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
909			yyerror("expected yes or no.");
910		else cfg_parser->cfg->harden_glue =
911			(strcmp($2, "yes")==0);
912		free($2);
913	}
914	;
915server_harden_dnssec_stripped: VAR_HARDEN_DNSSEC_STRIPPED STRING_ARG
916	{
917		OUTYY(("P(server_harden_dnssec_stripped:%s)\n", $2));
918		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
919			yyerror("expected yes or no.");
920		else cfg_parser->cfg->harden_dnssec_stripped =
921			(strcmp($2, "yes")==0);
922		free($2);
923	}
924	;
925server_harden_below_nxdomain: VAR_HARDEN_BELOW_NXDOMAIN STRING_ARG
926	{
927		OUTYY(("P(server_harden_below_nxdomain:%s)\n", $2));
928		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
929			yyerror("expected yes or no.");
930		else cfg_parser->cfg->harden_below_nxdomain =
931			(strcmp($2, "yes")==0);
932		free($2);
933	}
934	;
935server_harden_referral_path: VAR_HARDEN_REFERRAL_PATH STRING_ARG
936	{
937		OUTYY(("P(server_harden_referral_path:%s)\n", $2));
938		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
939			yyerror("expected yes or no.");
940		else cfg_parser->cfg->harden_referral_path =
941			(strcmp($2, "yes")==0);
942		free($2);
943	}
944	;
945server_harden_algo_downgrade: VAR_HARDEN_ALGO_DOWNGRADE STRING_ARG
946	{
947		OUTYY(("P(server_harden_algo_downgrade:%s)\n", $2));
948		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
949			yyerror("expected yes or no.");
950		else cfg_parser->cfg->harden_algo_downgrade =
951			(strcmp($2, "yes")==0);
952		free($2);
953	}
954	;
955server_use_caps_for_id: VAR_USE_CAPS_FOR_ID STRING_ARG
956	{
957		OUTYY(("P(server_use_caps_for_id:%s)\n", $2));
958		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
959			yyerror("expected yes or no.");
960		else cfg_parser->cfg->use_caps_bits_for_id =
961			(strcmp($2, "yes")==0);
962		free($2);
963	}
964	;
965server_caps_whitelist: VAR_CAPS_WHITELIST STRING_ARG
966	{
967		OUTYY(("P(server_caps_whitelist:%s)\n", $2));
968		if(!cfg_strlist_insert(&cfg_parser->cfg->caps_whitelist, $2))
969			yyerror("out of memory");
970	}
971	;
972server_private_address: VAR_PRIVATE_ADDRESS STRING_ARG
973	{
974		OUTYY(("P(server_private_address:%s)\n", $2));
975		if(!cfg_strlist_insert(&cfg_parser->cfg->private_address, $2))
976			yyerror("out of memory");
977	}
978	;
979server_private_domain: VAR_PRIVATE_DOMAIN STRING_ARG
980	{
981		OUTYY(("P(server_private_domain:%s)\n", $2));
982		if(!cfg_strlist_insert(&cfg_parser->cfg->private_domain, $2))
983			yyerror("out of memory");
984	}
985	;
986server_prefetch: VAR_PREFETCH STRING_ARG
987	{
988		OUTYY(("P(server_prefetch:%s)\n", $2));
989		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
990			yyerror("expected yes or no.");
991		else cfg_parser->cfg->prefetch = (strcmp($2, "yes")==0);
992		free($2);
993	}
994	;
995server_prefetch_key: VAR_PREFETCH_KEY STRING_ARG
996	{
997		OUTYY(("P(server_prefetch_key:%s)\n", $2));
998		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
999			yyerror("expected yes or no.");
1000		else cfg_parser->cfg->prefetch_key = (strcmp($2, "yes")==0);
1001		free($2);
1002	}
1003	;
1004server_unwanted_reply_threshold: VAR_UNWANTED_REPLY_THRESHOLD STRING_ARG
1005	{
1006		OUTYY(("P(server_unwanted_reply_threshold:%s)\n", $2));
1007		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1008			yyerror("number expected");
1009		else cfg_parser->cfg->unwanted_threshold = atoi($2);
1010		free($2);
1011	}
1012	;
1013server_do_not_query_address: VAR_DO_NOT_QUERY_ADDRESS STRING_ARG
1014	{
1015		OUTYY(("P(server_do_not_query_address:%s)\n", $2));
1016		if(!cfg_strlist_insert(&cfg_parser->cfg->donotqueryaddrs, $2))
1017			yyerror("out of memory");
1018	}
1019	;
1020server_do_not_query_localhost: VAR_DO_NOT_QUERY_LOCALHOST STRING_ARG
1021	{
1022		OUTYY(("P(server_do_not_query_localhost:%s)\n", $2));
1023		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1024			yyerror("expected yes or no.");
1025		else cfg_parser->cfg->donotquery_localhost =
1026			(strcmp($2, "yes")==0);
1027		free($2);
1028	}
1029	;
1030server_access_control: VAR_ACCESS_CONTROL STRING_ARG STRING_ARG
1031	{
1032		OUTYY(("P(server_access_control:%s %s)\n", $2, $3));
1033		if(strcmp($3, "deny")!=0 && strcmp($3, "refuse")!=0 &&
1034			strcmp($3, "deny_non_local")!=0 &&
1035			strcmp($3, "refuse_non_local")!=0 &&
1036			strcmp($3, "allow")!=0 &&
1037			strcmp($3, "allow_snoop")!=0) {
1038			yyerror("expected deny, refuse, deny_non_local, "
1039				"refuse_non_local, allow or allow_snoop "
1040				"in access control action");
1041		} else {
1042			if(!cfg_str2list_insert(&cfg_parser->cfg->acls, $2, $3))
1043				fatal_exit("out of memory adding acl");
1044		}
1045	}
1046	;
1047server_module_conf: VAR_MODULE_CONF STRING_ARG
1048	{
1049		OUTYY(("P(server_module_conf:%s)\n", $2));
1050		free(cfg_parser->cfg->module_conf);
1051		cfg_parser->cfg->module_conf = $2;
1052	}
1053	;
1054server_val_override_date: VAR_VAL_OVERRIDE_DATE STRING_ARG
1055	{
1056		OUTYY(("P(server_val_override_date:%s)\n", $2));
1057		if(*$2 == '\0' || strcmp($2, "0") == 0) {
1058			cfg_parser->cfg->val_date_override = 0;
1059		} else if(strlen($2) == 14) {
1060			cfg_parser->cfg->val_date_override =
1061				cfg_convert_timeval($2);
1062			if(!cfg_parser->cfg->val_date_override)
1063				yyerror("bad date/time specification");
1064		} else {
1065			if(atoi($2) == 0)
1066				yyerror("number expected");
1067			cfg_parser->cfg->val_date_override = atoi($2);
1068		}
1069		free($2);
1070	}
1071	;
1072server_val_sig_skew_min: VAR_VAL_SIG_SKEW_MIN STRING_ARG
1073	{
1074		OUTYY(("P(server_val_sig_skew_min:%s)\n", $2));
1075		if(*$2 == '\0' || strcmp($2, "0") == 0) {
1076			cfg_parser->cfg->val_sig_skew_min = 0;
1077		} else {
1078			cfg_parser->cfg->val_sig_skew_min = atoi($2);
1079			if(!cfg_parser->cfg->val_sig_skew_min)
1080				yyerror("number expected");
1081		}
1082		free($2);
1083	}
1084	;
1085server_val_sig_skew_max: VAR_VAL_SIG_SKEW_MAX STRING_ARG
1086	{
1087		OUTYY(("P(server_val_sig_skew_max:%s)\n", $2));
1088		if(*$2 == '\0' || strcmp($2, "0") == 0) {
1089			cfg_parser->cfg->val_sig_skew_max = 0;
1090		} else {
1091			cfg_parser->cfg->val_sig_skew_max = atoi($2);
1092			if(!cfg_parser->cfg->val_sig_skew_max)
1093				yyerror("number expected");
1094		}
1095		free($2);
1096	}
1097	;
1098server_cache_max_ttl: VAR_CACHE_MAX_TTL STRING_ARG
1099	{
1100		OUTYY(("P(server_cache_max_ttl:%s)\n", $2));
1101		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1102			yyerror("number expected");
1103		else cfg_parser->cfg->max_ttl = atoi($2);
1104		free($2);
1105	}
1106	;
1107server_cache_max_negative_ttl: VAR_CACHE_MAX_NEGATIVE_TTL STRING_ARG
1108	{
1109		OUTYY(("P(server_cache_max_negative_ttl:%s)\n", $2));
1110		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1111			yyerror("number expected");
1112		else cfg_parser->cfg->max_negative_ttl = atoi($2);
1113		free($2);
1114	}
1115	;
1116server_cache_min_ttl: VAR_CACHE_MIN_TTL STRING_ARG
1117	{
1118		OUTYY(("P(server_cache_min_ttl:%s)\n", $2));
1119		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1120			yyerror("number expected");
1121		else cfg_parser->cfg->min_ttl = atoi($2);
1122		free($2);
1123	}
1124	;
1125server_bogus_ttl: VAR_BOGUS_TTL STRING_ARG
1126	{
1127		OUTYY(("P(server_bogus_ttl:%s)\n", $2));
1128		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1129			yyerror("number expected");
1130		else cfg_parser->cfg->bogus_ttl = atoi($2);
1131		free($2);
1132	}
1133	;
1134server_val_clean_additional: VAR_VAL_CLEAN_ADDITIONAL STRING_ARG
1135	{
1136		OUTYY(("P(server_val_clean_additional:%s)\n", $2));
1137		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1138			yyerror("expected yes or no.");
1139		else cfg_parser->cfg->val_clean_additional =
1140			(strcmp($2, "yes")==0);
1141		free($2);
1142	}
1143	;
1144server_val_permissive_mode: VAR_VAL_PERMISSIVE_MODE STRING_ARG
1145	{
1146		OUTYY(("P(server_val_permissive_mode:%s)\n", $2));
1147		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1148			yyerror("expected yes or no.");
1149		else cfg_parser->cfg->val_permissive_mode =
1150			(strcmp($2, "yes")==0);
1151		free($2);
1152	}
1153	;
1154server_ignore_cd_flag: VAR_IGNORE_CD_FLAG STRING_ARG
1155	{
1156		OUTYY(("P(server_ignore_cd_flag:%s)\n", $2));
1157		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1158			yyerror("expected yes or no.");
1159		else cfg_parser->cfg->ignore_cd = (strcmp($2, "yes")==0);
1160		free($2);
1161	}
1162	;
1163server_val_log_level: VAR_VAL_LOG_LEVEL STRING_ARG
1164	{
1165		OUTYY(("P(server_val_log_level:%s)\n", $2));
1166		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1167			yyerror("number expected");
1168		else cfg_parser->cfg->val_log_level = atoi($2);
1169		free($2);
1170	}
1171	;
1172server_val_nsec3_keysize_iterations: VAR_VAL_NSEC3_KEYSIZE_ITERATIONS STRING_ARG
1173	{
1174		OUTYY(("P(server_val_nsec3_keysize_iterations:%s)\n", $2));
1175		free(cfg_parser->cfg->val_nsec3_key_iterations);
1176		cfg_parser->cfg->val_nsec3_key_iterations = $2;
1177	}
1178	;
1179server_add_holddown: VAR_ADD_HOLDDOWN STRING_ARG
1180	{
1181		OUTYY(("P(server_add_holddown:%s)\n", $2));
1182		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1183			yyerror("number expected");
1184		else cfg_parser->cfg->add_holddown = atoi($2);
1185		free($2);
1186	}
1187	;
1188server_del_holddown: VAR_DEL_HOLDDOWN STRING_ARG
1189	{
1190		OUTYY(("P(server_del_holddown:%s)\n", $2));
1191		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1192			yyerror("number expected");
1193		else cfg_parser->cfg->del_holddown = atoi($2);
1194		free($2);
1195	}
1196	;
1197server_keep_missing: VAR_KEEP_MISSING STRING_ARG
1198	{
1199		OUTYY(("P(server_keep_missing:%s)\n", $2));
1200		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1201			yyerror("number expected");
1202		else cfg_parser->cfg->keep_missing = atoi($2);
1203		free($2);
1204	}
1205	;
1206server_permit_small_holddown: VAR_PERMIT_SMALL_HOLDDOWN STRING_ARG
1207	{
1208		OUTYY(("P(server_permit_small_holddown:%s)\n", $2));
1209		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1210			yyerror("expected yes or no.");
1211		else cfg_parser->cfg->permit_small_holddown =
1212			(strcmp($2, "yes")==0);
1213		free($2);
1214	}
1215server_key_cache_size: VAR_KEY_CACHE_SIZE STRING_ARG
1216	{
1217		OUTYY(("P(server_key_cache_size:%s)\n", $2));
1218		if(!cfg_parse_memsize($2, &cfg_parser->cfg->key_cache_size))
1219			yyerror("memory size expected");
1220		free($2);
1221	}
1222	;
1223server_key_cache_slabs: VAR_KEY_CACHE_SLABS STRING_ARG
1224	{
1225		OUTYY(("P(server_key_cache_slabs:%s)\n", $2));
1226		if(atoi($2) == 0)
1227			yyerror("number expected");
1228		else {
1229			cfg_parser->cfg->key_cache_slabs = atoi($2);
1230			if(!is_pow2(cfg_parser->cfg->key_cache_slabs))
1231				yyerror("must be a power of 2");
1232		}
1233		free($2);
1234	}
1235	;
1236server_neg_cache_size: VAR_NEG_CACHE_SIZE STRING_ARG
1237	{
1238		OUTYY(("P(server_neg_cache_size:%s)\n", $2));
1239		if(!cfg_parse_memsize($2, &cfg_parser->cfg->neg_cache_size))
1240			yyerror("memory size expected");
1241		free($2);
1242	}
1243	;
1244server_local_zone: VAR_LOCAL_ZONE STRING_ARG STRING_ARG
1245	{
1246		OUTYY(("P(server_local_zone:%s %s)\n", $2, $3));
1247		if(strcmp($3, "static")!=0 && strcmp($3, "deny")!=0 &&
1248		   strcmp($3, "refuse")!=0 && strcmp($3, "redirect")!=0 &&
1249		   strcmp($3, "transparent")!=0 && strcmp($3, "nodefault")!=0
1250		   && strcmp($3, "typetransparent")!=0
1251		   && strcmp($3, "always_transparent")!=0
1252		   && strcmp($3, "always_refuse")!=0
1253		   && strcmp($3, "always_nxdomain")!=0
1254		   && strcmp($3, "inform")!=0 && strcmp($3, "inform_deny")!=0)
1255			yyerror("local-zone type: expected static, deny, "
1256				"refuse, redirect, transparent, "
1257				"typetransparent, inform, inform_deny, "
1258				"always_transparent, always_refuse, "
1259				"always_nxdomain or nodefault");
1260		else if(strcmp($3, "nodefault")==0) {
1261			if(!cfg_strlist_insert(&cfg_parser->cfg->
1262				local_zones_nodefault, $2))
1263				fatal_exit("out of memory adding local-zone");
1264			free($3);
1265		} else {
1266			if(!cfg_str2list_insert(&cfg_parser->cfg->local_zones,
1267				$2, $3))
1268				fatal_exit("out of memory adding local-zone");
1269		}
1270	}
1271	;
1272server_local_data: VAR_LOCAL_DATA STRING_ARG
1273	{
1274		OUTYY(("P(server_local_data:%s)\n", $2));
1275		if(!cfg_strlist_insert(&cfg_parser->cfg->local_data, $2))
1276			fatal_exit("out of memory adding local-data");
1277	}
1278	;
1279server_local_data_ptr: VAR_LOCAL_DATA_PTR STRING_ARG
1280	{
1281		char* ptr;
1282		OUTYY(("P(server_local_data_ptr:%s)\n", $2));
1283		ptr = cfg_ptr_reverse($2);
1284		free($2);
1285		if(ptr) {
1286			if(!cfg_strlist_insert(&cfg_parser->cfg->
1287				local_data, ptr))
1288				fatal_exit("out of memory adding local-data");
1289		} else {
1290			yyerror("local-data-ptr could not be reversed");
1291		}
1292	}
1293	;
1294server_minimal_responses: VAR_MINIMAL_RESPONSES STRING_ARG
1295	{
1296		OUTYY(("P(server_minimal_responses:%s)\n", $2));
1297		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1298			yyerror("expected yes or no.");
1299		else cfg_parser->cfg->minimal_responses =
1300			(strcmp($2, "yes")==0);
1301		free($2);
1302	}
1303	;
1304server_rrset_roundrobin: VAR_RRSET_ROUNDROBIN STRING_ARG
1305	{
1306		OUTYY(("P(server_rrset_roundrobin:%s)\n", $2));
1307		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1308			yyerror("expected yes or no.");
1309		else cfg_parser->cfg->rrset_roundrobin =
1310			(strcmp($2, "yes")==0);
1311		free($2);
1312	}
1313	;
1314server_max_udp_size: VAR_MAX_UDP_SIZE STRING_ARG
1315	{
1316		OUTYY(("P(server_max_udp_size:%s)\n", $2));
1317		cfg_parser->cfg->max_udp_size = atoi($2);
1318		free($2);
1319	}
1320	;
1321server_dns64_prefix: VAR_DNS64_PREFIX STRING_ARG
1322	{
1323		OUTYY(("P(dns64_prefix:%s)\n", $2));
1324		free(cfg_parser->cfg->dns64_prefix);
1325		cfg_parser->cfg->dns64_prefix = $2;
1326	}
1327	;
1328server_dns64_synthall: VAR_DNS64_SYNTHALL STRING_ARG
1329	{
1330		OUTYY(("P(server_dns64_synthall:%s)\n", $2));
1331		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1332			yyerror("expected yes or no.");
1333		else cfg_parser->cfg->dns64_synthall = (strcmp($2, "yes")==0);
1334		free($2);
1335	}
1336	;
1337server_define_tag: VAR_DEFINE_TAG STRING_ARG
1338	{
1339		char* p, *s = $2;
1340		OUTYY(("P(server_define_tag:%s)\n", $2));
1341		while((p=strsep(&s, " \t\n")) != NULL) {
1342			if(*p) {
1343				if(!config_add_tag(cfg_parser->cfg, p))
1344					yyerror("could not define-tag, "
1345						"out of memory");
1346			}
1347		}
1348		free($2);
1349	}
1350	;
1351server_local_zone_tag: VAR_LOCAL_ZONE_TAG STRING_ARG STRING_ARG
1352	{
1353		size_t len = 0;
1354		uint8_t* bitlist = config_parse_taglist(cfg_parser->cfg, $3,
1355			&len);
1356		free($3);
1357		OUTYY(("P(server_local_zone_tag:%s)\n", $2));
1358		if(!bitlist)
1359			yyerror("could not parse tags, (define-tag them first)");
1360		if(bitlist) {
1361			if(!cfg_strbytelist_insert(
1362				&cfg_parser->cfg->local_zone_tags,
1363				$2, bitlist, len)) {
1364				yyerror("out of memory");
1365				free($2);
1366			}
1367		}
1368	}
1369	;
1370server_access_control_tag: VAR_ACCESS_CONTROL_TAG STRING_ARG STRING_ARG
1371	{
1372		size_t len = 0;
1373		uint8_t* bitlist = config_parse_taglist(cfg_parser->cfg, $3,
1374			&len);
1375		free($3);
1376		OUTYY(("P(server_access_control_tag:%s)\n", $2));
1377		if(!bitlist)
1378			yyerror("could not parse tags, (define-tag them first)");
1379		if(bitlist) {
1380			if(!cfg_strbytelist_insert(
1381				&cfg_parser->cfg->acl_tags,
1382				$2, bitlist, len)) {
1383				yyerror("out of memory");
1384				free($2);
1385			}
1386		}
1387	}
1388	;
1389server_access_control_tag_action: VAR_ACCESS_CONTROL_TAG_ACTION STRING_ARG STRING_ARG STRING_ARG
1390	{
1391		OUTYY(("P(server_access_control_tag_action:%s %s %s)\n", $2, $3, $4));
1392		if(!cfg_str3list_insert(&cfg_parser->cfg->acl_tag_actions,
1393			$2, $3, $4)) {
1394			yyerror("out of memory");
1395			free($2);
1396			free($3);
1397			free($4);
1398		}
1399	}
1400	;
1401server_access_control_tag_data: VAR_ACCESS_CONTROL_TAG_DATA STRING_ARG STRING_ARG STRING_ARG
1402	{
1403		OUTYY(("P(server_access_control_tag_data:%s %s %s)\n", $2, $3, $4));
1404		if(!cfg_str3list_insert(&cfg_parser->cfg->acl_tag_datas,
1405			$2, $3, $4)) {
1406			yyerror("out of memory");
1407			free($2);
1408			free($3);
1409			free($4);
1410		}
1411	}
1412	;
1413server_local_zone_override: VAR_LOCAL_ZONE_OVERRIDE STRING_ARG STRING_ARG STRING_ARG
1414	{
1415		OUTYY(("P(server_local_zone_override:%s %s %s)\n", $2, $3, $4));
1416		if(!cfg_str3list_insert(&cfg_parser->cfg->local_zone_overrides,
1417			$2, $3, $4)) {
1418			yyerror("out of memory");
1419			free($2);
1420			free($3);
1421			free($4);
1422		}
1423	}
1424	;
1425server_ratelimit: VAR_RATELIMIT STRING_ARG
1426	{
1427		OUTYY(("P(server_ratelimit:%s)\n", $2));
1428		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1429			yyerror("number expected");
1430		else cfg_parser->cfg->ratelimit = atoi($2);
1431		free($2);
1432	}
1433	;
1434server_ratelimit_size: VAR_RATELIMIT_SIZE STRING_ARG
1435	{
1436		OUTYY(("P(server_ratelimit_size:%s)\n", $2));
1437		if(!cfg_parse_memsize($2, &cfg_parser->cfg->ratelimit_size))
1438			yyerror("memory size expected");
1439		free($2);
1440	}
1441	;
1442server_ratelimit_slabs: VAR_RATELIMIT_SLABS STRING_ARG
1443	{
1444		OUTYY(("P(server_ratelimit_slabs:%s)\n", $2));
1445		if(atoi($2) == 0)
1446			yyerror("number expected");
1447		else {
1448			cfg_parser->cfg->ratelimit_slabs = atoi($2);
1449			if(!is_pow2(cfg_parser->cfg->ratelimit_slabs))
1450				yyerror("must be a power of 2");
1451		}
1452		free($2);
1453	}
1454	;
1455server_ratelimit_for_domain: VAR_RATELIMIT_FOR_DOMAIN STRING_ARG STRING_ARG
1456	{
1457		OUTYY(("P(server_ratelimit_for_domain:%s %s)\n", $2, $3));
1458		if(atoi($3) == 0 && strcmp($3, "0") != 0) {
1459			yyerror("number expected");
1460		} else {
1461			if(!cfg_str2list_insert(&cfg_parser->cfg->
1462				ratelimit_for_domain, $2, $3))
1463				fatal_exit("out of memory adding "
1464					"ratelimit-for-domain");
1465		}
1466	}
1467	;
1468server_ratelimit_below_domain: VAR_RATELIMIT_BELOW_DOMAIN STRING_ARG STRING_ARG
1469	{
1470		OUTYY(("P(server_ratelimit_below_domain:%s %s)\n", $2, $3));
1471		if(atoi($3) == 0 && strcmp($3, "0") != 0) {
1472			yyerror("number expected");
1473		} else {
1474			if(!cfg_str2list_insert(&cfg_parser->cfg->
1475				ratelimit_below_domain, $2, $3))
1476				fatal_exit("out of memory adding "
1477					"ratelimit-below-domain");
1478		}
1479	}
1480	;
1481server_ratelimit_factor: VAR_RATELIMIT_FACTOR STRING_ARG
1482	{
1483		OUTYY(("P(server_ratelimit_factor:%s)\n", $2));
1484		if(atoi($2) == 0 && strcmp($2, "0") != 0)
1485			yyerror("number expected");
1486		else cfg_parser->cfg->ratelimit_factor = atoi($2);
1487		free($2);
1488	}
1489	;
1490server_qname_minimisation: VAR_QNAME_MINIMISATION STRING_ARG
1491	{
1492		OUTYY(("P(server_qname_minimisation:%s)\n", $2));
1493		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1494			yyerror("expected yes or no.");
1495		else cfg_parser->cfg->qname_minimisation =
1496			(strcmp($2, "yes")==0);
1497		free($2);
1498	}
1499	;
1500stub_name: VAR_NAME STRING_ARG
1501	{
1502		OUTYY(("P(name:%s)\n", $2));
1503		if(cfg_parser->cfg->stubs->name)
1504			yyerror("stub name override, there must be one name "
1505				"for one stub-zone");
1506		free(cfg_parser->cfg->stubs->name);
1507		cfg_parser->cfg->stubs->name = $2;
1508	}
1509	;
1510stub_host: VAR_STUB_HOST STRING_ARG
1511	{
1512		OUTYY(("P(stub-host:%s)\n", $2));
1513		if(!cfg_strlist_insert(&cfg_parser->cfg->stubs->hosts, $2))
1514			yyerror("out of memory");
1515	}
1516	;
1517stub_addr: VAR_STUB_ADDR STRING_ARG
1518	{
1519		OUTYY(("P(stub-addr:%s)\n", $2));
1520		if(!cfg_strlist_insert(&cfg_parser->cfg->stubs->addrs, $2))
1521			yyerror("out of memory");
1522	}
1523	;
1524stub_first: VAR_STUB_FIRST STRING_ARG
1525	{
1526		OUTYY(("P(stub-first:%s)\n", $2));
1527		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1528			yyerror("expected yes or no.");
1529		else cfg_parser->cfg->stubs->isfirst=(strcmp($2, "yes")==0);
1530		free($2);
1531	}
1532	;
1533stub_prime: VAR_STUB_PRIME STRING_ARG
1534	{
1535		OUTYY(("P(stub-prime:%s)\n", $2));
1536		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1537			yyerror("expected yes or no.");
1538		else cfg_parser->cfg->stubs->isprime =
1539			(strcmp($2, "yes")==0);
1540		free($2);
1541	}
1542	;
1543forward_name: VAR_NAME STRING_ARG
1544	{
1545		OUTYY(("P(name:%s)\n", $2));
1546		if(cfg_parser->cfg->forwards->name)
1547			yyerror("forward name override, there must be one "
1548				"name for one forward-zone");
1549		free(cfg_parser->cfg->forwards->name);
1550		cfg_parser->cfg->forwards->name = $2;
1551	}
1552	;
1553forward_host: VAR_FORWARD_HOST STRING_ARG
1554	{
1555		OUTYY(("P(forward-host:%s)\n", $2));
1556		if(!cfg_strlist_insert(&cfg_parser->cfg->forwards->hosts, $2))
1557			yyerror("out of memory");
1558	}
1559	;
1560forward_addr: VAR_FORWARD_ADDR STRING_ARG
1561	{
1562		OUTYY(("P(forward-addr:%s)\n", $2));
1563		if(!cfg_strlist_insert(&cfg_parser->cfg->forwards->addrs, $2))
1564			yyerror("out of memory");
1565	}
1566	;
1567forward_first: VAR_FORWARD_FIRST STRING_ARG
1568	{
1569		OUTYY(("P(forward-first:%s)\n", $2));
1570		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1571			yyerror("expected yes or no.");
1572		else cfg_parser->cfg->forwards->isfirst=(strcmp($2, "yes")==0);
1573		free($2);
1574	}
1575	;
1576rcstart: VAR_REMOTE_CONTROL
1577	{
1578		OUTYY(("\nP(remote-control:)\n"));
1579	}
1580	;
1581contents_rc: contents_rc content_rc
1582	| ;
1583content_rc: rc_control_enable | rc_control_interface | rc_control_port |
1584	rc_server_key_file | rc_server_cert_file | rc_control_key_file |
1585	rc_control_cert_file | rc_control_use_cert
1586	;
1587rc_control_enable: VAR_CONTROL_ENABLE STRING_ARG
1588	{
1589		OUTYY(("P(control_enable:%s)\n", $2));
1590		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1591			yyerror("expected yes or no.");
1592		else cfg_parser->cfg->remote_control_enable =
1593			(strcmp($2, "yes")==0);
1594		free($2);
1595	}
1596	;
1597rc_control_port: VAR_CONTROL_PORT STRING_ARG
1598	{
1599		OUTYY(("P(control_port:%s)\n", $2));
1600		if(atoi($2) == 0)
1601			yyerror("control port number expected");
1602		else cfg_parser->cfg->control_port = atoi($2);
1603		free($2);
1604	}
1605	;
1606rc_control_interface: VAR_CONTROL_INTERFACE STRING_ARG
1607	{
1608		OUTYY(("P(control_interface:%s)\n", $2));
1609		if(!cfg_strlist_insert(&cfg_parser->cfg->control_ifs, $2))
1610			yyerror("out of memory");
1611	}
1612	;
1613rc_control_use_cert: VAR_CONTROL_USE_CERT STRING_ARG
1614	{
1615		OUTYY(("P(control_use_cert:%s)\n", $2));
1616		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1617			yyerror("expected yes or no.");
1618		else cfg_parser->cfg->remote_control_use_cert =
1619			(strcmp($2, "yes")==0);
1620		free($2);
1621	}
1622	;
1623rc_server_key_file: VAR_SERVER_KEY_FILE STRING_ARG
1624	{
1625		OUTYY(("P(rc_server_key_file:%s)\n", $2));
1626		free(cfg_parser->cfg->server_key_file);
1627		cfg_parser->cfg->server_key_file = $2;
1628	}
1629	;
1630rc_server_cert_file: VAR_SERVER_CERT_FILE STRING_ARG
1631	{
1632		OUTYY(("P(rc_server_cert_file:%s)\n", $2));
1633		free(cfg_parser->cfg->server_cert_file);
1634		cfg_parser->cfg->server_cert_file = $2;
1635	}
1636	;
1637rc_control_key_file: VAR_CONTROL_KEY_FILE STRING_ARG
1638	{
1639		OUTYY(("P(rc_control_key_file:%s)\n", $2));
1640		free(cfg_parser->cfg->control_key_file);
1641		cfg_parser->cfg->control_key_file = $2;
1642	}
1643	;
1644rc_control_cert_file: VAR_CONTROL_CERT_FILE STRING_ARG
1645	{
1646		OUTYY(("P(rc_control_cert_file:%s)\n", $2));
1647		free(cfg_parser->cfg->control_cert_file);
1648		cfg_parser->cfg->control_cert_file = $2;
1649	}
1650	;
1651dtstart: VAR_DNSTAP
1652	{
1653		OUTYY(("\nP(dnstap:)\n"));
1654	}
1655	;
1656contents_dt: contents_dt content_dt
1657	| ;
1658content_dt: dt_dnstap_enable | dt_dnstap_socket_path |
1659	dt_dnstap_send_identity | dt_dnstap_send_version |
1660	dt_dnstap_identity | dt_dnstap_version |
1661	dt_dnstap_log_resolver_query_messages |
1662	dt_dnstap_log_resolver_response_messages |
1663	dt_dnstap_log_client_query_messages |
1664	dt_dnstap_log_client_response_messages |
1665	dt_dnstap_log_forwarder_query_messages |
1666	dt_dnstap_log_forwarder_response_messages
1667	;
1668dt_dnstap_enable: VAR_DNSTAP_ENABLE STRING_ARG
1669	{
1670		OUTYY(("P(dt_dnstap_enable:%s)\n", $2));
1671		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1672			yyerror("expected yes or no.");
1673		else cfg_parser->cfg->dnstap = (strcmp($2, "yes")==0);
1674	}
1675	;
1676dt_dnstap_socket_path: VAR_DNSTAP_SOCKET_PATH STRING_ARG
1677	{
1678		OUTYY(("P(dt_dnstap_socket_path:%s)\n", $2));
1679		free(cfg_parser->cfg->dnstap_socket_path);
1680		cfg_parser->cfg->dnstap_socket_path = $2;
1681	}
1682	;
1683dt_dnstap_send_identity: VAR_DNSTAP_SEND_IDENTITY STRING_ARG
1684	{
1685		OUTYY(("P(dt_dnstap_send_identity:%s)\n", $2));
1686		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1687			yyerror("expected yes or no.");
1688		else cfg_parser->cfg->dnstap_send_identity = (strcmp($2, "yes")==0);
1689	}
1690	;
1691dt_dnstap_send_version: VAR_DNSTAP_SEND_VERSION STRING_ARG
1692	{
1693		OUTYY(("P(dt_dnstap_send_version:%s)\n", $2));
1694		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1695			yyerror("expected yes or no.");
1696		else cfg_parser->cfg->dnstap_send_version = (strcmp($2, "yes")==0);
1697	}
1698	;
1699dt_dnstap_identity: VAR_DNSTAP_IDENTITY STRING_ARG
1700	{
1701		OUTYY(("P(dt_dnstap_identity:%s)\n", $2));
1702		free(cfg_parser->cfg->dnstap_identity);
1703		cfg_parser->cfg->dnstap_identity = $2;
1704	}
1705	;
1706dt_dnstap_version: VAR_DNSTAP_VERSION STRING_ARG
1707	{
1708		OUTYY(("P(dt_dnstap_version:%s)\n", $2));
1709		free(cfg_parser->cfg->dnstap_version);
1710		cfg_parser->cfg->dnstap_version = $2;
1711	}
1712	;
1713dt_dnstap_log_resolver_query_messages: VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES STRING_ARG
1714	{
1715		OUTYY(("P(dt_dnstap_log_resolver_query_messages:%s)\n", $2));
1716		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1717			yyerror("expected yes or no.");
1718		else cfg_parser->cfg->dnstap_log_resolver_query_messages =
1719			(strcmp($2, "yes")==0);
1720	}
1721	;
1722dt_dnstap_log_resolver_response_messages: VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES STRING_ARG
1723	{
1724		OUTYY(("P(dt_dnstap_log_resolver_response_messages:%s)\n", $2));
1725		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1726			yyerror("expected yes or no.");
1727		else cfg_parser->cfg->dnstap_log_resolver_response_messages =
1728			(strcmp($2, "yes")==0);
1729	}
1730	;
1731dt_dnstap_log_client_query_messages: VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES STRING_ARG
1732	{
1733		OUTYY(("P(dt_dnstap_log_client_query_messages:%s)\n", $2));
1734		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1735			yyerror("expected yes or no.");
1736		else cfg_parser->cfg->dnstap_log_client_query_messages =
1737			(strcmp($2, "yes")==0);
1738	}
1739	;
1740dt_dnstap_log_client_response_messages: VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES STRING_ARG
1741	{
1742		OUTYY(("P(dt_dnstap_log_client_response_messages:%s)\n", $2));
1743		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1744			yyerror("expected yes or no.");
1745		else cfg_parser->cfg->dnstap_log_client_response_messages =
1746			(strcmp($2, "yes")==0);
1747	}
1748	;
1749dt_dnstap_log_forwarder_query_messages: VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES STRING_ARG
1750	{
1751		OUTYY(("P(dt_dnstap_log_forwarder_query_messages:%s)\n", $2));
1752		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1753			yyerror("expected yes or no.");
1754		else cfg_parser->cfg->dnstap_log_forwarder_query_messages =
1755			(strcmp($2, "yes")==0);
1756	}
1757	;
1758dt_dnstap_log_forwarder_response_messages: VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES STRING_ARG
1759	{
1760		OUTYY(("P(dt_dnstap_log_forwarder_response_messages:%s)\n", $2));
1761		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1762			yyerror("expected yes or no.");
1763		else cfg_parser->cfg->dnstap_log_forwarder_response_messages =
1764			(strcmp($2, "yes")==0);
1765	}
1766	;
1767pythonstart: VAR_PYTHON
1768	{
1769		OUTYY(("\nP(python:)\n"));
1770	}
1771	;
1772contents_py: contents_py content_py
1773	| ;
1774content_py: py_script
1775	;
1776py_script: VAR_PYTHON_SCRIPT STRING_ARG
1777	{
1778		OUTYY(("P(python-script:%s)\n", $2));
1779		free(cfg_parser->cfg->python_script);
1780		cfg_parser->cfg->python_script = $2;
1781	}
1782server_disable_dnssec_lame_check: VAR_DISABLE_DNSSEC_LAME_CHECK STRING_ARG
1783	{
1784		OUTYY(("P(disable_dnssec_lame_check:%s)\n", $2));
1785		if (strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
1786			yyerror("expected yes or no.");
1787		else cfg_parser->cfg->disable_dnssec_lame_check =
1788			(strcmp($2, "yes")==0);
1789		free($2);
1790	}
1791%%
1792
1793/* parse helper routines could be here */
1794