<!-- - Copyright (C) 2004 Internet Systems Consortium, Inc. ("ISC") - - Permission to use, copy, modify, and distribute this software for any - purpose with or without fee is hereby granted, provided that the above - copyright notice and this permission notice appear in all copies. - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> <!-- $Id: named.conf.html,v 1.1.4.4 2004/10/18 02:33:06 marka Exp $ --> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <HTML ><HEAD ><TITLE >named.conf</TITLE ><META NAME="GENERATOR" CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD ><BODY CLASS="REFENTRY" BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#0000FF" VLINK="#840084" ALINK="#0000FF" ><H1 ><A NAME="AEN1" ></A ><TT CLASS="FILENAME" >named.conf</TT ></H1 ><DIV CLASS="REFNAMEDIV" ><A NAME="AEN9" ></A ><H2 >Name</H2 ><TT CLASS="FILENAME" >named.conf</TT > -- configuration file for named</DIV ><DIV CLASS="REFSYNOPSISDIV" ><A NAME="AEN13" ></A ><H2 >Synopsis</H2 ><P ><B CLASS="COMMAND" >named.conf</B > </P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN16" ></A ><H2 >DESCRIPTION</H2 ><P > <TT CLASS="FILENAME" >named.conf</TT > is the configuration file for <B CLASS="COMMAND" >named</B >. Statements are enclosed in braces and terminated with a semi-colon. Clauses in the statements are also semi-colon terminated. The usual comment styles are supported: </P ><P > C style: /* */ </P ><P > C++ style: // to end of line </P ><P > Unix style: # to end of line </P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN24" ></A ><H2 >ACL</H2 ><P CLASS="LITERALLAYOUT" >acl <VAR CLASS="REPLACEABLE" >string</VAR > { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> </P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN29" ></A ><H2 >KEY</H2 ><P CLASS="LITERALLAYOUT" >key <VAR CLASS="REPLACEABLE" >domain_name</VAR > {<br> algorithm <VAR CLASS="REPLACEABLE" >string</VAR >;<br> secret <VAR CLASS="REPLACEABLE" >string</VAR >;<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN35" ></A ><H2 >MASTERS</H2 ><P CLASS="LITERALLAYOUT" >masters <VAR CLASS="REPLACEABLE" >string</VAR > [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >masters</VAR > | <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] |<br> <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] ) [<SPAN CLASS="OPTIONAL" > key <VAR CLASS="REPLACEABLE" >string</VAR > </SPAN >]; ...<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN50" ></A ><H2 >SERVER</H2 ><P CLASS="LITERALLAYOUT" >server ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > ) {<br> bogus <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> edns <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> provide-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> request-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> keys <VAR CLASS="REPLACEABLE" >server_key</VAR >;<br> transfers <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> transfer-format ( many-answers | one-answer );<br> transfer-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> transfer-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> <br> support-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN68" ></A ><H2 >TRUSTED-KEYS</H2 ><P CLASS="LITERALLAYOUT" >trusted-keys {<br> <VAR CLASS="REPLACEABLE" >domain_name</VAR > <VAR CLASS="REPLACEABLE" >flags</VAR > <VAR CLASS="REPLACEABLE" >protocol</VAR > <VAR CLASS="REPLACEABLE" >algorithm</VAR > <VAR CLASS="REPLACEABLE" >key</VAR >; ... <br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN76" ></A ><H2 >CONTROLS</H2 ><P CLASS="LITERALLAYOUT" >controls {<br> inet ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >]<br> allow { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... }<br> [<SPAN CLASS="OPTIONAL" > keys { <VAR CLASS="REPLACEABLE" >string</VAR >; ... } </SPAN >];<br> unix <VAR CLASS="REPLACEABLE" >unsupported</VAR >; // not implemented<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN87" ></A ><H2 >LOGGING</H2 ><P CLASS="LITERALLAYOUT" >logging {<br> channel <VAR CLASS="REPLACEABLE" >string</VAR > {<br> file <VAR CLASS="REPLACEABLE" >log_file</VAR >;<br> syslog <VAR CLASS="REPLACEABLE" >optional_facility</VAR >;<br> null;<br> stderr;<br> severity <VAR CLASS="REPLACEABLE" >log_severity</VAR >;<br> print-time <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> print-severity <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> print-category <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> };<br> category <VAR CLASS="REPLACEABLE" >string</VAR > { <VAR CLASS="REPLACEABLE" >string</VAR >; ... };<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN99" ></A ><H2 >LWRES</H2 ><P CLASS="LITERALLAYOUT" >lwres {<br> listen-on [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > ) [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >]; ...<br> };<br> view <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >optional_class</VAR >;<br> search { <VAR CLASS="REPLACEABLE" >string</VAR >; ... };<br> ndots <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN112" ></A ><H2 >OPTIONS</H2 ><P CLASS="LITERALLAYOUT" >options {<br> avoid-v4-udp-ports { <VAR CLASS="REPLACEABLE" >port</VAR >; ... };<br> avoid-v6-udp-ports { <VAR CLASS="REPLACEABLE" >port</VAR >; ... };<br> blackhole { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> coresize <VAR CLASS="REPLACEABLE" >size</VAR >;<br> datasize <VAR CLASS="REPLACEABLE" >size</VAR >;<br> directory <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> dump-file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> files <VAR CLASS="REPLACEABLE" >size</VAR >;<br> heartbeat-interval <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> host-statistics <VAR CLASS="REPLACEABLE" >boolean</VAR >; // not implemented<br> host-statistics-max <VAR CLASS="REPLACEABLE" >number</VAR >; // not implemented<br> hostname ( <VAR CLASS="REPLACEABLE" >quoted_string</VAR > | none );<br> interface-interval <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> listen-on [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> listen-on-v6 [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> match-mapped-addresses <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> memstatistics-file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> pid-file ( <VAR CLASS="REPLACEABLE" >quoted_string</VAR > | none );<br> port <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> querylog <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> recursing-file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> random-device <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> recursive-clients <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> serial-query-rate <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> server-id ( <VAR CLASS="REPLACEABLE" >quoted_string</VAR > | none |;<br> stacksize <VAR CLASS="REPLACEABLE" >size</VAR >;<br> statistics-file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> statistics-interval <VAR CLASS="REPLACEABLE" >integer</VAR >; // not yet implemented<br> tcp-clients <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> tcp-listen-queue <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> tkey-dhkey <VAR CLASS="REPLACEABLE" >quoted_string</VAR > <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> tkey-gssapi-credential <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> tkey-domain <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> transfers-per-ns <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> transfers-in <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> transfers-out <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> use-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> version ( <VAR CLASS="REPLACEABLE" >quoted_string</VAR > | none );<br> allow-recursion { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> sortlist { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> topology { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... }; // not implemented<br> auth-nxdomain <VAR CLASS="REPLACEABLE" >boolean</VAR >; // default changed<br> minimal-responses <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> recursion <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> rrset-order {<br> [<SPAN CLASS="OPTIONAL" > class <VAR CLASS="REPLACEABLE" >string</VAR > </SPAN >] [<SPAN CLASS="OPTIONAL" > type <VAR CLASS="REPLACEABLE" >string</VAR > </SPAN >]<br> [<SPAN CLASS="OPTIONAL" > name <VAR CLASS="REPLACEABLE" >quoted_string</VAR > </SPAN >] <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >string</VAR >; ...<br> };<br> provide-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> request-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> rfc2308-type1 <VAR CLASS="REPLACEABLE" >boolean</VAR >; // not yet implemented<br> additional-from-auth <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> additional-from-cache <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> query-source <VAR CLASS="REPLACEABLE" >querysource4</VAR >;<br> query-source-v6 <VAR CLASS="REPLACEABLE" >querysource6</VAR >;<br> cleaning-interval <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-roots <VAR CLASS="REPLACEABLE" >integer</VAR >; // not implemented<br> lame-ttl <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-ncache-ttl <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-cache-ttl <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> transfer-format ( many-answers | one-answer );<br> max-cache-size <VAR CLASS="REPLACEABLE" >size_no_default</VAR >;<br> check-names ( master | slave | response )<br> ( fail | warn | ignore );<br> cache-file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> suppress-initial-notify <VAR CLASS="REPLACEABLE" >boolean</VAR >; // not yet implemented<br> preferred-glue <VAR CLASS="REPLACEABLE" >string</VAR >;<br> dual-stack-servers [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >quoted_string</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] |<br> <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] |<br> <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] ); ...<br> }<br> edns-udp-size <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> root-delegation-only [<SPAN CLASS="OPTIONAL" > exclude { <VAR CLASS="REPLACEABLE" >quoted_string</VAR >; ... } </SPAN >];<br> disable-algorithms <VAR CLASS="REPLACEABLE" >string</VAR > { <VAR CLASS="REPLACEABLE" >string</VAR >; ... };<br> dnssec-enable <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> dnssec-lookaside <VAR CLASS="REPLACEABLE" >string</VAR > trust-anchor <VAR CLASS="REPLACEABLE" >string</VAR >;<br> dnssec-must-be-secure <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> <br> dialup <VAR CLASS="REPLACEABLE" >dialuptype</VAR >;<br> ixfr-from-differences <VAR CLASS="REPLACEABLE" >ixfrdiff</VAR >;<br> <br> allow-query { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> allow-transfer { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> allow-update-forwarding { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> <br> notify <VAR CLASS="REPLACEABLE" >notifytype</VAR >;<br> notify-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * ) [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> notify-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * ) [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> also-notify [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] { ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > )<br> [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >]; ... };<br> allow-notify { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> <br> forward ( first | only );<br> forwarders [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > ) [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >]; ...<br> };<br> <br> max-journal-size <VAR CLASS="REPLACEABLE" >size_no_default</VAR >;<br> max-transfer-time-in <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-time-out <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-idle-in <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-idle-out <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-retry-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-retry-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-refresh-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-refresh-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> multi-master <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> sig-validity-interval <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> <br> transfer-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> transfer-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> <br> alt-transfer-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> alt-transfer-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> use-alt-transfer-source <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> <br> zone-statistics <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> key-directory <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> <br> allow-v6-synthesis { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... }; // obsolete<br> deallocate-on-exit <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> fake-iquery <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> fetch-glue <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> has-old-clients <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> maintain-ixfr-base <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> max-ixfr-log-size <VAR CLASS="REPLACEABLE" >size</VAR >; // obsolete<br> multiple-cnames <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> named-xfer <VAR CLASS="REPLACEABLE" >quoted_string</VAR >; // obsolete<br> serial-queries <VAR CLASS="REPLACEABLE" >integer</VAR >; // obsolete<br> treat-cr-as-space <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> use-id-pool <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN272" ></A ><H2 >VIEW</H2 ><P CLASS="LITERALLAYOUT" >view <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >optional_class</VAR > {<br> match-clients { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> match-destinations { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> match-recursive-only <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> <br> key <VAR CLASS="REPLACEABLE" >string</VAR > {<br> algorithm <VAR CLASS="REPLACEABLE" >string</VAR >;<br> secret <VAR CLASS="REPLACEABLE" >string</VAR >;<br> };<br> <br> zone <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >optional_class</VAR > {<br> ...<br> };<br> <br> server ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > ) {<br> ...<br> };<br> <br> trusted-keys {<br> <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >integer</VAR > <VAR CLASS="REPLACEABLE" >integer</VAR > <VAR CLASS="REPLACEABLE" >integer</VAR > <VAR CLASS="REPLACEABLE" >quoted_string</VAR >; ...<br> };<br> <br> allow-recursion { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> sortlist { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> topology { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... }; // not implemented<br> auth-nxdomain <VAR CLASS="REPLACEABLE" >boolean</VAR >; // default changed<br> minimal-responses <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> recursion <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> rrset-order {<br> [<SPAN CLASS="OPTIONAL" > class <VAR CLASS="REPLACEABLE" >string</VAR > </SPAN >] [<SPAN CLASS="OPTIONAL" > type <VAR CLASS="REPLACEABLE" >string</VAR > </SPAN >]<br> [<SPAN CLASS="OPTIONAL" > name <VAR CLASS="REPLACEABLE" >quoted_string</VAR > </SPAN >] <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >string</VAR >; ...<br> };<br> provide-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> request-ixfr <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> rfc2308-type1 <VAR CLASS="REPLACEABLE" >boolean</VAR >; // not yet implemented<br> additional-from-auth <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> additional-from-cache <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> query-source <VAR CLASS="REPLACEABLE" >querysource4</VAR >;<br> query-source-v6 <VAR CLASS="REPLACEABLE" >querysource6</VAR >;<br> cleaning-interval <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-roots <VAR CLASS="REPLACEABLE" >integer</VAR >; // not implemented<br> lame-ttl <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-ncache-ttl <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-cache-ttl <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> transfer-format ( many-answers | one-answer );<br> max-cache-size <VAR CLASS="REPLACEABLE" >size_no_default</VAR >;<br> check-names ( master | slave | response )<br> ( fail | warn | ignore );<br> cache-file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> suppress-initial-notify <VAR CLASS="REPLACEABLE" >boolean</VAR >; // not yet implemented<br> preferred-glue <VAR CLASS="REPLACEABLE" >string</VAR >;<br> dual-stack-servers [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >quoted_string</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] |<br> <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] |<br> <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] ); ...<br> };<br> edns-udp-size <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> root-delegation-only [<SPAN CLASS="OPTIONAL" > exclude { <VAR CLASS="REPLACEABLE" >quoted_string</VAR >; ... } </SPAN >];<br> disable-algorithms <VAR CLASS="REPLACEABLE" >string</VAR > { <VAR CLASS="REPLACEABLE" >string</VAR >; ... };<br> dnssec-enable <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> dnssec-lookaside <VAR CLASS="REPLACEABLE" >string</VAR > trust-anchor <VAR CLASS="REPLACEABLE" >string</VAR >;<br> <br> dnssec-must-be-secure <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> dialup <VAR CLASS="REPLACEABLE" >dialuptype</VAR >;<br> ixfr-from-differences <VAR CLASS="REPLACEABLE" >ixfrdiff</VAR >;<br> <br> allow-query { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> allow-transfer { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> allow-update-forwarding { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> <br> notify <VAR CLASS="REPLACEABLE" >notifytype</VAR >;<br> notify-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * ) [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> notify-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * ) [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> also-notify [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] { ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > )<br> [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >]; ... };<br> allow-notify { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> <br> forward ( first | only );<br> forwarders [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > ) [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >]; ...<br> };<br> <br> max-journal-size <VAR CLASS="REPLACEABLE" >size_no_default</VAR >;<br> max-transfer-time-in <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-time-out <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-idle-in <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-idle-out <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-retry-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-retry-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-refresh-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-refresh-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> multi-master <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> sig-validity-interval <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> <br> transfer-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> transfer-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> <br> alt-transfer-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> alt-transfer-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> use-alt-transfer-source <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> <br> zone-statistics <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> key-directory <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> <br> allow-v6-synthesis { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... }; // obsolete<br> fetch-glue <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> maintain-ixfr-base <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> max-ixfr-log-size <VAR CLASS="REPLACEABLE" >size</VAR >; // obsolete<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN398" ></A ><H2 >ZONE</H2 ><P CLASS="LITERALLAYOUT" >zone <VAR CLASS="REPLACEABLE" >string</VAR > <VAR CLASS="REPLACEABLE" >optional_class</VAR > {<br> type ( master | slave | stub | hint |<br> forward | delegation-only );<br> file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> <br> masters [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >masters</VAR > |<br> <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > [<SPAN CLASS="OPTIONAL" >port <VAR CLASS="REPLACEABLE" >integer</VAR ></SPAN >] |<br> <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] ) [<SPAN CLASS="OPTIONAL" > key <VAR CLASS="REPLACEABLE" >string</VAR > </SPAN >]; ...<br> };<br> <br> database <VAR CLASS="REPLACEABLE" >string</VAR >;<br> delegation-only <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> check-names ( fail | warn | ignore );<br> dialup <VAR CLASS="REPLACEABLE" >dialuptype</VAR >;<br> ixfr-from-differences <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> <br> allow-query { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> allow-transfer { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> allow-update { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> allow-update-forwarding { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> update-policy {<br> ( grant | deny ) <VAR CLASS="REPLACEABLE" >string</VAR ><br> ( name | subdomain | wildcard | self ) <VAR CLASS="REPLACEABLE" >string</VAR ><br> <VAR CLASS="REPLACEABLE" >rrtypelist</VAR >; ...<br> };<br> <br> notify <VAR CLASS="REPLACEABLE" >notifytype</VAR >;<br> notify-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * ) [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> notify-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * ) [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> also-notify [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] { ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > )<br> [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >]; ... };<br> allow-notify { <VAR CLASS="REPLACEABLE" >address_match_element</VAR >; ... };<br> <br> forward ( first | only );<br> forwarders [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >] {<br> ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > ) [<SPAN CLASS="OPTIONAL" > port <VAR CLASS="REPLACEABLE" >integer</VAR > </SPAN >]; ...<br> };<br> <br> max-journal-size <VAR CLASS="REPLACEABLE" >size_no_default</VAR >;<br> max-transfer-time-in <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-time-out <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-idle-in <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-transfer-idle-out <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-retry-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-retry-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> max-refresh-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> min-refresh-time <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> multi-master <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> sig-validity-interval <VAR CLASS="REPLACEABLE" >integer</VAR >;<br> <br> transfer-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> transfer-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> <br> alt-transfer-source ( <VAR CLASS="REPLACEABLE" >ipv4_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> alt-transfer-source-v6 ( <VAR CLASS="REPLACEABLE" >ipv6_address</VAR > | * )<br> [<SPAN CLASS="OPTIONAL" > port ( <VAR CLASS="REPLACEABLE" >integer</VAR > | * ) </SPAN >];<br> use-alt-transfer-source <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> <br> zone-statistics <VAR CLASS="REPLACEABLE" >boolean</VAR >;<br> key-directory <VAR CLASS="REPLACEABLE" >quoted_string</VAR >;<br> <br> ixfr-base <VAR CLASS="REPLACEABLE" >quoted_string</VAR >; // obsolete<br> ixfr-tmp-file <VAR CLASS="REPLACEABLE" >quoted_string</VAR >; // obsolete<br> maintain-ixfr-base <VAR CLASS="REPLACEABLE" >boolean</VAR >; // obsolete<br> max-ixfr-log-size <VAR CLASS="REPLACEABLE" >size</VAR >; // obsolete<br> pubkey <VAR CLASS="REPLACEABLE" >integer</VAR > <VAR CLASS="REPLACEABLE" >integer</VAR > <VAR CLASS="REPLACEABLE" >integer</VAR > <VAR CLASS="REPLACEABLE" >quoted_string</VAR >; // obsolete<br> };</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN480" ></A ><H2 >FILES</H2 ><P ><TT CLASS="FILENAME" >/etc/named.conf</TT ></P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN484" ></A ><H2 >SEE ALSO</H2 ><P ><SPAN CLASS="CITEREFENTRY" ><SPAN CLASS="REFENTRYTITLE" >named</SPAN >(8)</SPAN >, <SPAN CLASS="CITEREFENTRY" ><SPAN CLASS="REFENTRYTITLE" >rndc</SPAN >(8)</SPAN >, <SPAN CLASS="CITEREFENTRY" ><SPAN CLASS="REFENTRYTITLE" >BIND 9 Adminstrators Reference Manual</SPAN ></SPAN >.</P ></DIV ></BODY ></HTML >