named.conf.html revision 193149 
1227569Sphilip<!--
2227569Sphilip - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
3227569Sphilip - 
4227569Sphilip - Permission to use, copy, modify, and distribute this software for any
5227569Sphilip - purpose with or without fee is hereby granted, provided that the above
6227569Sphilip - copyright notice and this permission notice appear in all copies.
7227569Sphilip - 
8227569Sphilip - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9227569Sphilip - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
10227569Sphilip - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11227569Sphilip - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
12227569Sphilip - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13227569Sphilip - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14227569Sphilip - PERFORMANCE OF THIS SOFTWARE.
15227569Sphilip-->
16227569Sphilip<!-- $Id: named.conf.html,v 1.45 2008/09/25 04:45:04 tbox Exp $ -->
17227569Sphilip<html>
18227569Sphilip<head>
19227569Sphilip<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
20227569Sphilip<title>named.conf</title>
21227569Sphilip<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
22227569Sphilip</head>
23227569Sphilip<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
24228100Sphilip<a name="id2476275"></a><div class="titlepage"></div>
25228100Sphilip<div class="refnamediv">
26227569Sphilip<h2>Name</h2>
27227569Sphilip<p><code class="filename">named.conf</code> &#8212; configuration file for named</p>
28227569Sphilip</div>
29227569Sphilip<div class="refsynopsisdiv">
30227569Sphilip<h2>Synopsis</h2>
31227569Sphilip<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
32227569Sphilip</div>
33227569Sphilip<div class="refsect1" lang="en">
34227569Sphilip<a name="id2543342"></a><h2>DESCRIPTION</h2>
35227569Sphilip<p><code class="filename">named.conf</code> is the configuration file
36227569Sphilip      for
37227569Sphilip      <span><strong class="command">named</strong></span>.  Statements are enclosed
38227569Sphilip      in braces and terminated with a semi-colon.  Clauses in
39227569Sphilip      the statements are also semi-colon terminated.  The usual
40227569Sphilip      comment styles are supported:
41227569Sphilip    </p>
42227569Sphilip<p>
43227569Sphilip      C style: /* */
44227569Sphilip    </p>
45227569Sphilip<p>
46227569Sphilip      C++ style: // to end of line
47227569Sphilip    </p>
48227569Sphilip<p>
49227569Sphilip      Unix style: # to end of line
50227569Sphilip    </p>
51227569Sphilip</div>
52227569Sphilip<div class="refsect1" lang="en">
53227569Sphilip<a name="id2543370"></a><h2>ACL</h2>
54227569Sphilip<div class="literallayout"><p><br>
55227569Sphilipacl�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
56227569Sphilip<br>
57227569Sphilip</p></div>
58227569Sphilip</div>
59227569Sphilip<div class="refsect1" lang="en">
60227569Sphilip<a name="id2543386"></a><h2>KEY</h2>
61227569Sphilip<div class="literallayout"><p><br>
62227569Sphilipkey�<em class="replaceable"><code>domain_name</code></em>�{<br>
63227569Sphilip	algorithm�<em class="replaceable"><code>string</code></em>;<br>
64227569Sphilip	secret�<em class="replaceable"><code>string</code></em>;<br>
65227569Sphilip};<br>
66227569Sphilip</p></div>
67227569Sphilip</div>
68227569Sphilip<div class="refsect1" lang="en">
69227569Sphilip<a name="id2543405"></a><h2>MASTERS</h2>
70227569Sphilip<div class="literallayout"><p><br>
71227569Sphilipmasters�<em class="replaceable"><code>string</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
72227569Sphilip	(�<em class="replaceable"><code>masters</code></em>�|�<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
73227569Sphilip	<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
74227569Sphilip};<br>
75227569Sphilip</p></div>
76227569Sphilip</div>
77227569Sphilip<div class="refsect1" lang="en">
78227569Sphilip<a name="id2543451"></a><h2>SERVER</h2>
79227569Sphilip<div class="literallayout"><p><br>
80227569Sphilipserver�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
81227569Sphilip	bogus�<em class="replaceable"><code>boolean</code></em>;<br>
82227569Sphilip	edns�<em class="replaceable"><code>boolean</code></em>;<br>
83227569Sphilip	edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
84227569Sphilip	max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
85227569Sphilip	provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
86227569Sphilip	request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
87227569Sphilip	keys�<em class="replaceable"><code>server_key</code></em>;<br>
88227569Sphilip	transfers�<em class="replaceable"><code>integer</code></em>;<br>
89227569Sphilip	transfer-format�(�many-answers�|�one-answer�);<br>
90227569Sphilip	transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
91227569Sphilip		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
92227569Sphilip	transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
93227569Sphilip		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
94227569Sphilip<br>
95227569Sphilip	support-ixfr�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
96227569Sphilip};<br>
97227569Sphilip</p></div>
98227569Sphilip</div>
99227569Sphilip<div class="refsect1" lang="en">
100227569Sphilip<a name="id2543520"></a><h2>TRUSTED-KEYS</h2>
101227569Sphilip<div class="literallayout"><p><br>
102227569Sphiliptrusted-keys�{<br>
103227569Sphilip	<em class="replaceable"><code>domain_name</code></em>�<em class="replaceable"><code>flags</code></em>�<em class="replaceable"><code>protocol</code></em>�<em class="replaceable"><code>algorithm</code></em>�<em class="replaceable"><code>key</code></em>;�...�<br>
104227569Sphilip};<br>
105227569Sphilip</p></div>
106227569Sphilip</div>
107227569Sphilip<div class="refsect1" lang="en">
108227569Sphilip<a name="id2543545"></a><h2>CONTROLS</h2>
109227569Sphilip<div class="literallayout"><p><br>
110227569Sphilipcontrols�{<br>
111227569Sphilip	inet�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
112227569Sphilip		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>]<br>
113227569Sphilip		allow�{�<em class="replaceable"><code>address_match_element</code></em>;�...�}<br>
114227569Sphilip		[<span class="optional">�keys�{�<em class="replaceable"><code>string</code></em>;�...�}�</span>];<br>
115227569Sphilip	unix�<em class="replaceable"><code>unsupported</code></em>;�//�not�implemented<br>
116227569Sphilip};<br>
117227569Sphilip</p></div>
118227569Sphilip</div>
119227569Sphilip<div class="refsect1" lang="en">
120227569Sphilip<a name="id2543580"></a><h2>LOGGING</h2>
121227569Sphilip<div class="literallayout"><p><br>
122227569Sphiliplogging�{<br>
123227569Sphilip	channel�<em class="replaceable"><code>string</code></em>�{<br>
124227569Sphilip		file�<em class="replaceable"><code>log_file</code></em>;<br>
125227569Sphilip		syslog�<em class="replaceable"><code>optional_facility</code></em>;<br>
126227569Sphilip		null;<br>
127227569Sphilip		stderr;<br>
128227569Sphilip		severity�<em class="replaceable"><code>log_severity</code></em>;<br>
129227569Sphilip		print-time�<em class="replaceable"><code>boolean</code></em>;<br>
130227569Sphilip		print-severity�<em class="replaceable"><code>boolean</code></em>;<br>
131227569Sphilip		print-category�<em class="replaceable"><code>boolean</code></em>;<br>
132227569Sphilip	};<br>
133227569Sphilip	category�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
134};<br>
135</p></div>
136</div>
137<div class="refsect1" lang="en">
138<a name="id2543619"></a><h2>LWRES</h2>
139<div class="literallayout"><p><br>
140lwres�{<br>
141	listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
142		(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
143	};<br>
144	view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>;<br>
145	search�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
146	ndots�<em class="replaceable"><code>integer</code></em>;<br>
147};<br>
148</p></div>
149</div>
150<div class="refsect1" lang="en">
151<a name="id2543660"></a><h2>OPTIONS</h2>
152<div class="literallayout"><p><br>
153options�{<br>
154	avoid-v4-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
155	avoid-v6-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
156	blackhole�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
157	coresize�<em class="replaceable"><code>size</code></em>;<br>
158	datasize�<em class="replaceable"><code>size</code></em>;<br>
159	directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
160	dump-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
161	files�<em class="replaceable"><code>size</code></em>;<br>
162	heartbeat-interval�<em class="replaceable"><code>integer</code></em>;<br>
163	host-statistics�<em class="replaceable"><code>boolean</code></em>;�//�not�implemented<br>
164	host-statistics-max�<em class="replaceable"><code>number</code></em>;�//�not�implemented<br>
165	hostname�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
166	interface-interval�<em class="replaceable"><code>integer</code></em>;<br>
167	listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
168	listen-on-v6�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
169	match-mapped-addresses�<em class="replaceable"><code>boolean</code></em>;<br>
170	memstatistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
171	pid-file�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
172	port�<em class="replaceable"><code>integer</code></em>;<br>
173	querylog�<em class="replaceable"><code>boolean</code></em>;<br>
174	recursing-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
175	reserved-sockets�<em class="replaceable"><code>integer</code></em>;<br>
176	random-device�<em class="replaceable"><code>quoted_string</code></em>;<br>
177	recursive-clients�<em class="replaceable"><code>integer</code></em>;<br>
178	serial-query-rate�<em class="replaceable"><code>integer</code></em>;<br>
179	server-id�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�|;<br>
180	stacksize�<em class="replaceable"><code>size</code></em>;<br>
181	statistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
182	statistics-interval�<em class="replaceable"><code>integer</code></em>;�//�not�yet�implemented<br>
183	tcp-clients�<em class="replaceable"><code>integer</code></em>;<br>
184	tcp-listen-queue�<em class="replaceable"><code>integer</code></em>;<br>
185	tkey-dhkey�<em class="replaceable"><code>quoted_string</code></em>�<em class="replaceable"><code>integer</code></em>;<br>
186	tkey-gssapi-credential�<em class="replaceable"><code>quoted_string</code></em>;<br>
187	tkey-domain�<em class="replaceable"><code>quoted_string</code></em>;<br>
188	transfers-per-ns�<em class="replaceable"><code>integer</code></em>;<br>
189	transfers-in�<em class="replaceable"><code>integer</code></em>;<br>
190	transfers-out�<em class="replaceable"><code>integer</code></em>;<br>
191	use-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
192	version�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
193	allow-recursion�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
194	allow-recursion-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
195	sortlist�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
196	topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
197	auth-nxdomain�<em class="replaceable"><code>boolean</code></em>;�//�default�changed<br>
198	minimal-responses�<em class="replaceable"><code>boolean</code></em>;<br>
199	recursion�<em class="replaceable"><code>boolean</code></em>;<br>
200	rrset-order�{<br>
201		[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
202		[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
203	};<br>
204	provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
205	request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
206	rfc2308-type1�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
207	additional-from-auth�<em class="replaceable"><code>boolean</code></em>;<br>
208	additional-from-cache�<em class="replaceable"><code>boolean</code></em>;<br>
209	query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
210	query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
211	use-queryport-pool�<em class="replaceable"><code>boolean</code></em>;<br>
212	queryport-pool-ports�<em class="replaceable"><code>integer</code></em>;<br>
213	queryport-pool-updateinterval�<em class="replaceable"><code>integer</code></em>;<br>
214	cleaning-interval�<em class="replaceable"><code>integer</code></em>;<br>
215	min-roots�<em class="replaceable"><code>integer</code></em>;�//�not�implemented<br>
216	lame-ttl�<em class="replaceable"><code>integer</code></em>;<br>
217	max-ncache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
218	max-cache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
219	transfer-format�(�many-answers�|�one-answer�);<br>
220	max-cache-size�<em class="replaceable"><code>size</code></em>;<br>
221	max-acache-size�<em class="replaceable"><code>size</code></em>;<br>
222	clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
223	max-clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
224	check-names�(�master�|�slave�|�response�)<br>
225		(�fail�|�warn�|�ignore�);<br>
226	check-mx�(�fail�|�warn�|�ignore�);<br>
227	check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
228	check-mx-cname�(�fail�|�warn�|�ignore�);<br>
229	check-srv-cname�(�fail�|�warn�|�ignore�);<br>
230	cache-file�<em class="replaceable"><code>quoted_string</code></em>;�//�test�option<br>
231	suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
232	preferred-glue�<em class="replaceable"><code>string</code></em>;<br>
233	dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
234		(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
235		<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
236		<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
237	};<br>
238	edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
239	max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
240	root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
241	disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
242	dnssec-enable�<em class="replaceable"><code>boolean</code></em>;<br>
243	dnssec-validation�<em class="replaceable"><code>boolean</code></em>;<br>
244	dnssec-lookaside�<em class="replaceable"><code>string</code></em>�trust-anchor�<em class="replaceable"><code>string</code></em>;<br>
245	dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
246	dnssec-accept-expired�<em class="replaceable"><code>boolean</code></em>;<br>
247<br>
248	empty-server�<em class="replaceable"><code>string</code></em>;<br>
249	empty-contact�<em class="replaceable"><code>string</code></em>;<br>
250	empty-zones-enable�<em class="replaceable"><code>boolean</code></em>;<br>
251	disable-empty-zone�<em class="replaceable"><code>string</code></em>;<br>
252<br>
253	dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
254	ixfr-from-differences�<em class="replaceable"><code>ixfrdiff</code></em>;<br>
255<br>
256	allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
257	allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
258	allow-query-cache�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
259	allow-query-cache-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
260	allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
261	allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
262	allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
263	update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
264<br>
265	masterfile-format�(�text�|�raw�);<br>
266	notify�<em class="replaceable"><code>notifytype</code></em>;<br>
267	notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
268	notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
269	notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
270	notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
271	also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
272		[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
273	allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
274<br>
275	forward�(�first�|�only�);<br>
276	forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
277		(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
278	};<br>
279<br>
280	max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
281	max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
282	max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
283	max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
284	max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
285	max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
286	min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
287	max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
288	min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
289	multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
290<br>
291	sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
292	sig-re-signing-interval�<em class="replaceable"><code>integer</code></em>;<br>
293	sig-signing-nodes�<em class="replaceable"><code>integer</code></em>;<br>
294	sig-signing-signatures�<em class="replaceable"><code>integer</code></em>;<br>
295	sig-signing-type�<em class="replaceable"><code>integer</code></em>;<br>
296<br>
297	transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
298		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
299	transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
300		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
301<br>
302	alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
303		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
304	alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
305		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
306	use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
307<br>
308	zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
309	key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
310	try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
311	zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
312	zero-no-soa-ttl-cache�<em class="replaceable"><code>boolean</code></em>;<br>
313<br>
314	nsec3-test-zone�<em class="replaceable"><code>boolean</code></em>;��//�testing�only<br>
315<br>
316	allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
317	deallocate-on-exit�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
318	fake-iquery�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
319	fetch-glue�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
320	has-old-clients�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
321	maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
322	max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
323	multiple-cnames�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
324	named-xfer�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
325	serial-queries�<em class="replaceable"><code>integer</code></em>;�//�obsolete<br>
326	treat-cr-as-space�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
327	use-id-pool�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
328};<br>
329</p></div>
330</div>
331<div class="refsect1" lang="en">
332<a name="id2544452"></a><h2>VIEW</h2>
333<div class="literallayout"><p><br>
334view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
335	match-clients�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
336	match-destinations�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
337	match-recursive-only�<em class="replaceable"><code>boolean</code></em>;<br>
338<br>
339	key�<em class="replaceable"><code>string</code></em>�{<br>
340		algorithm�<em class="replaceable"><code>string</code></em>;<br>
341		secret�<em class="replaceable"><code>string</code></em>;<br>
342	};<br>
343<br>
344	zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
345		...<br>
346	};<br>
347<br>
348	server�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
349		...<br>
350	};<br>
351<br>
352	trusted-keys�{<br>
353		<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;�...<br>
354	};<br>
355<br>
356	allow-recursion�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
357	allow-recursion-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
358	sortlist�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
359	topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
360	auth-nxdomain�<em class="replaceable"><code>boolean</code></em>;�//�default�changed<br>
361	minimal-responses�<em class="replaceable"><code>boolean</code></em>;<br>
362	recursion�<em class="replaceable"><code>boolean</code></em>;<br>
363	rrset-order�{<br>
364		[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
365		[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
366	};<br>
367	provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
368	request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
369	rfc2308-type1�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
370	additional-from-auth�<em class="replaceable"><code>boolean</code></em>;<br>
371	additional-from-cache�<em class="replaceable"><code>boolean</code></em>;<br>
372	query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
373	query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
374	use-queryport-pool�<em class="replaceable"><code>boolean</code></em>;<br>
375	queryport-pool-ports�<em class="replaceable"><code>integer</code></em>;<br>
376	queryport-pool-updateinterval�<em class="replaceable"><code>integer</code></em>;<br>
377	cleaning-interval�<em class="replaceable"><code>integer</code></em>;<br>
378	min-roots�<em class="replaceable"><code>integer</code></em>;�//�not�implemented<br>
379	lame-ttl�<em class="replaceable"><code>integer</code></em>;<br>
380	max-ncache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
381	max-cache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
382	transfer-format�(�many-answers�|�one-answer�);<br>
383	max-cache-size�<em class="replaceable"><code>size</code></em>;<br>
384	max-acache-size�<em class="replaceable"><code>size</code></em>;<br>
385	clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
386	max-clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
387	check-names�(�master�|�slave�|�response�)<br>
388		(�fail�|�warn�|�ignore�);<br>
389	check-mx�(�fail�|�warn�|�ignore�);<br>
390	check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
391	check-mx-cname�(�fail�|�warn�|�ignore�);<br>
392	check-srv-cname�(�fail�|�warn�|�ignore�);<br>
393	cache-file�<em class="replaceable"><code>quoted_string</code></em>;�//�test�option<br>
394	suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
395	preferred-glue�<em class="replaceable"><code>string</code></em>;<br>
396	dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
397		(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
398		<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
399		<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
400	};<br>
401	edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
402	max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
403	root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
404	disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
405	dnssec-enable�<em class="replaceable"><code>boolean</code></em>;<br>
406	dnssec-validation�<em class="replaceable"><code>boolean</code></em>;<br>
407	dnssec-lookaside�<em class="replaceable"><code>string</code></em>�trust-anchor�<em class="replaceable"><code>string</code></em>;<br>
408	dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
409	dnssec-accept-expired�<em class="replaceable"><code>boolean</code></em>;<br>
410<br>
411	empty-server�<em class="replaceable"><code>string</code></em>;<br>
412	empty-contact�<em class="replaceable"><code>string</code></em>;<br>
413	empty-zones-enable�<em class="replaceable"><code>boolean</code></em>;<br>
414	disable-empty-zone�<em class="replaceable"><code>string</code></em>;<br>
415<br>
416	dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
417	ixfr-from-differences�<em class="replaceable"><code>ixfrdiff</code></em>;<br>
418<br>
419	allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
420	allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
421	allow-query-cache�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
422	allow-query-cache-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
423	allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
424	allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
425	allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
426	update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
427<br>
428	masterfile-format�(�text�|�raw�);<br>
429	notify�<em class="replaceable"><code>notifytype</code></em>;<br>
430	notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
431	notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
432	notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
433	notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
434	also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
435		[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
436	allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
437<br>
438	forward�(�first�|�only�);<br>
439	forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
440		(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
441	};<br>
442<br>
443	max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
444	max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
445	max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
446	max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
447	max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
448	max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
449	min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
450	max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
451	min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
452	multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
453	sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
454<br>
455	transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
456		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
457	transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
458		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
459<br>
460	alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
461		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
462	alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
463		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
464	use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
465<br>
466	zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
467	try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
468	key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
469	zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
470	zero-no-soa-ttl-cache�<em class="replaceable"><code>boolean</code></em>;<br>
471<br>
472	allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
473	fetch-glue�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
474	maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
475	max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
476};<br>
477</p></div>
478</div>
479<div class="refsect1" lang="en">
480<a name="id2545113"></a><h2>ZONE</h2>
481<div class="literallayout"><p><br>
482zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
483	type�(�master�|�slave�|�stub�|�hint�|<br>
484		forward�|�delegation-only�);<br>
485	file�<em class="replaceable"><code>quoted_string</code></em>;<br>
486<br>
487	masters�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
488		(�<em class="replaceable"><code>masters</code></em>�|<br>
489		<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
490		<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
491	};<br>
492<br>
493	database�<em class="replaceable"><code>string</code></em>;<br>
494	delegation-only�<em class="replaceable"><code>boolean</code></em>;<br>
495	check-names�(�fail�|�warn�|�ignore�);<br>
496	check-mx�(�fail�|�warn�|�ignore�);<br>
497	check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
498	check-mx-cname�(�fail�|�warn�|�ignore�);<br>
499	check-srv-cname�(�fail�|�warn�|�ignore�);<br>
500	dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
501	ixfr-from-differences�<em class="replaceable"><code>boolean</code></em>;<br>
502	journal�<em class="replaceable"><code>quoted_string</code></em>;<br>
503	zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
504<br>
505	allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
506	allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
507	allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
508	allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
509	allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
510	update-policy�{<br>
511		(�grant�|�deny�)�<em class="replaceable"><code>string</code></em><br>
512		(�name�|�subdomain�|�wildcard�|�self�|�selfsub�|�selfwild�|<br>
513������������������krb5-self�|�ms-self�|�krb5-subdomain�|�ms-subdomain�|<br>
514		��tcp-self�|�6to4-self�)�<em class="replaceable"><code>string</code></em><br>
515		<em class="replaceable"><code>rrtypelist</code></em>;�...<br>
516	};<br>
517	update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
518<br>
519	masterfile-format�(�text�|�raw�);<br>
520	notify�<em class="replaceable"><code>notifytype</code></em>;<br>
521	notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
522	notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
523	notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
524	notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
525	also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
526		[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
527	allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
528<br>
529	forward�(�first�|�only�);<br>
530	forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
531		(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
532	};<br>
533<br>
534	max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
535	max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
536	max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
537	max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
538	max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
539	max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
540	min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
541	max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
542	min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
543	multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
544	sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
545<br>
546	transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
547		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
548	transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
549		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
550<br>
551	alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
552		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
553	alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
554		[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
555	use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
556<br>
557	zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
558	try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
559	key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
560<br>
561	nsec3-test-zone�<em class="replaceable"><code>boolean</code></em>;��//�testing�only<br>
562<br>
563	ixfr-base�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
564	ixfr-tmp-file�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
565	maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
566	max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
567	pubkey�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
568};<br>
569</p></div>
570</div>
571<div class="refsect1" lang="en">
572<a name="id2545410"></a><h2>FILES</h2>
573<p><code class="filename">/etc/named.conf</code>
574    </p>
575</div>
576<div class="refsect1" lang="en">
577<a name="id2545421"></a><h2>SEE ALSO</h2>
578<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
579      <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
580      <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
581      <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
582    </p>
583</div>
584</div></body>
585</html>
586