Annotation of src/external/mpl/bind/dist/doc/arm/man.named.conf.html, Revision 1.1.1.1
1.1 christos 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
2: <!--
3: - Copyright (C) 2000-2018 Internet Systems Consortium, Inc. ("ISC")
4: -
5: - This Source Code Form is subject to the terms of the Mozilla Public
6: - License, v. 2.0. If a copy of the MPL was not distributed with this
7: - file, You can obtain one at http://mozilla.org/MPL/2.0/.
8: -->
9: <html lang="en">
10: <head>
11: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
12: <title>named.conf</title>
13: <meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14: <link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
15: <link rel="up" href="Bv9ARM.ch12.html" title="Manual pages">
16: <link rel="prev" href="man.named-rrchecker.html" title="named-rrchecker">
17: <link rel="next" href="man.named.html" title="named">
18: </head>
19: <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
20: <div class="navheader">
21: <table width="100%" summary="Navigation header">
22: <tr><th colspan="3" align="center"><code class="filename">named.conf</code></th></tr>
23: <tr>
24: <td width="20%" align="left">
25: <a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
26: <th width="60%" align="center">Manual pages</th>
27: <td width="20%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
28: </td>
29: </tr>
30: </table>
31: <hr>
32: </div>
33: <div class="refentry">
34: <a name="man.named.conf"></a><div class="titlepage"></div>
35:
36:
37:
38:
39:
40: <div class="refnamediv">
41: <h2>Name</h2>
42: <p>
43: <code class="filename">named.conf</code>
44: — configuration file for <span class="command"><strong>named</strong></span>
45: </p>
46: </div>
47:
48:
49:
50: <div class="refsynopsisdiv">
51: <h2>Synopsis</h2>
52: <div class="cmdsynopsis"><p>
53: <code class="command">named.conf</code>
54: </p></div>
55: </div>
56:
57: <div class="refsection">
58: <a name="id-1.13.27.7"></a><h2>DESCRIPTION</h2>
59:
60: <p><code class="filename">named.conf</code> is the configuration file
61: for
62: <span class="command"><strong>named</strong></span>. Statements are enclosed
63: in braces and terminated with a semi-colon. Clauses in
64: the statements are also semi-colon terminated. The usual
65: comment styles are supported:
66: </p>
67: <p>
68: C style: /* */
69: </p>
70: <p>
71: C++ style: // to end of line
72: </p>
73: <p>
74: Unix style: # to end of line
75: </p>
76: </div>
77:
78: <div class="refsection">
79: <a name="id-1.13.27.8"></a><h2>ACL</h2>
80:
81: <div class="literallayout"><p><br>
82: acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
83: </p></div>
84: </div>
85:
86: <div class="refsection">
87: <a name="id-1.13.27.9"></a><h2>CONTROLS</h2>
88:
89: <div class="literallayout"><p><br>
90: controls {<br>
91: inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
92: * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] allow<br>
93: { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
94: keys { <em class="replaceable"><code>string</code></em>; ... } ] [ read-only<br>
95: <em class="replaceable"><code>boolean</code></em> ];<br>
96: unix <em class="replaceable"><code>quoted_string</code></em> perm <em class="replaceable"><code>integer</code></em><br>
97: owner <em class="replaceable"><code>integer</code></em> group <em class="replaceable"><code>integer</code></em> [<br>
98: keys { <em class="replaceable"><code>string</code></em>; ... } ] [ read-only<br>
99: <em class="replaceable"><code>boolean</code></em> ];<br>
100: };<br>
101: </p></div>
102: </div>
103:
104: <div class="refsection">
105: <a name="id-1.13.27.10"></a><h2>DLZ</h2>
106:
107: <div class="literallayout"><p><br>
108: dlz <em class="replaceable"><code>string</code></em> {<br>
109: database <em class="replaceable"><code>string</code></em>;<br>
110: search <em class="replaceable"><code>boolean</code></em>;<br>
111: };<br>
112: </p></div>
113: </div>
114:
115: <div class="refsection">
116: <a name="id-1.13.27.11"></a><h2>DYNDB</h2>
117:
118: <div class="literallayout"><p><br>
119: dyndb <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>quoted_string</code></em> {<br>
120: <em class="replaceable"><code>unspecified-text</code></em> };<br>
121: </p></div>
122: </div>
123:
124: <div class="refsection">
125: <a name="id-1.13.27.12"></a><h2>KEY</h2>
126:
127: <div class="literallayout"><p><br>
128: key <em class="replaceable"><code>string</code></em> {<br>
129: algorithm <em class="replaceable"><code>string</code></em>;<br>
130: secret <em class="replaceable"><code>string</code></em>;<br>
131: };<br>
132: </p></div>
133: </div>
134:
135: <div class="refsection">
136: <a name="id-1.13.27.13"></a><h2>LOGGING</h2>
137:
138: <div class="literallayout"><p><br>
139: logging {<br>
140: category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
141: channel <em class="replaceable"><code>string</code></em> {<br>
142: buffered <em class="replaceable"><code>boolean</code></em>;<br>
143: file <em class="replaceable"><code>quoted_string</code></em> [ versions ( unlimited | <em class="replaceable"><code>integer</code></em> ) ]<br>
144: [ size <em class="replaceable"><code>size</code></em> ] [ suffix ( increment | timestamp ) ];<br>
145: null;<br>
146: print-category <em class="replaceable"><code>boolean</code></em>;<br>
147: print-severity <em class="replaceable"><code>boolean</code></em>;<br>
148: print-time ( iso8601 | iso8601-utc | local | <em class="replaceable"><code>boolean</code></em> );<br>
149: severity <em class="replaceable"><code>log_severity</code></em>;<br>
150: stderr;<br>
151: syslog [ <em class="replaceable"><code>syslog_facility</code></em> ];<br>
152: };<br>
153: };<br>
154: </p></div>
155: </div>
156:
157:
158: <div class="refsection">
159: <a name="id-1.13.27.14"></a><h2>MANAGED-KEYS</h2>
160:
161: <div class="literallayout"><p><br>
162: managed-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
163: <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
164: </p></div>
165: </div>
166:
167: <div class="refsection">
168: <a name="id-1.13.27.15"></a><h2>MASTERS</h2>
169:
170: <div class="literallayout"><p><br>
171: masters <em class="replaceable"><code>string</code></em> [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
172: <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
173: port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
174: <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
175: </p></div>
176: </div>
177:
178: <div class="refsection">
179: <a name="id-1.13.27.16"></a><h2>OPTIONS</h2>
180:
181: <div class="literallayout"><p><br>
182: options {<br>
183: allow-new-zones <em class="replaceable"><code>boolean</code></em>;<br>
184: allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
185: allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
186: allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
187: allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
188: allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
189: allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
190: allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
191: allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
192: allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
193: allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
194: also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
195: <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
196: <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
197: alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
198: ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
199: alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
200: * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
201: answer-cookie <em class="replaceable"><code>boolean</code></em>;<br>
202: attach-cache <em class="replaceable"><code>string</code></em>;<br>
203: auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
204: auto-dnssec ( allow | maintain | off );<br>
205: automatic-interface-scan <em class="replaceable"><code>boolean</code></em>;<br>
206: avoid-v4-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
207: avoid-v6-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
208: bindkeys-file <em class="replaceable"><code>quoted_string</code></em>;<br>
209: blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
210: cache-file <em class="replaceable"><code>quoted_string</code></em>;<br>
211: catalog-zones { zone <em class="replaceable"><code>quoted_string</code></em> [ default-masters [ port<br>
212: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
213: port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key<br>
214: <em class="replaceable"><code>string</code></em> ]; ... } ] [ zone-directory <em class="replaceable"><code>quoted_string</code></em> ] [<br>
215: in-memory <em class="replaceable"><code>boolean</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ]; ... };<br>
216: check-dup-records ( fail | warn | ignore );<br>
217: check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
218: check-mx ( fail | warn | ignore );<br>
219: check-mx-cname ( fail | warn | ignore );<br>
220: check-names ( master | slave | response<br>
221: ) ( fail | warn | ignore );<br>
222: check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
223: check-spf ( warn | ignore );<br>
224: check-srv-cname ( fail | warn | ignore );<br>
225: check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
226: cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
227: clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
228: cookie-algorithm ( aes | sha1 | sha256 );<br>
229: cookie-secret <em class="replaceable"><code>string</code></em>;<br>
230: coresize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
231: datasize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
232: deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
233: except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
234: deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
235: <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
236: dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
237: directory <em class="replaceable"><code>quoted_string</code></em>;<br>
238: disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
239: ... };<br>
240: disable-ds-digests <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
241: ... };<br>
242: disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
243: dns64 <em class="replaceable"><code>netprefix</code></em> {<br>
244: break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
245: clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
246: exclude { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
247: mapped { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
248: recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
249: suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
250: };<br>
251: dns64-contact <em class="replaceable"><code>string</code></em>;<br>
252: dns64-server <em class="replaceable"><code>string</code></em>;<br>
253: dnsrps-enable <em class="replaceable"><code>boolean</code></em>;<br>
254: dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em> };<br>
255: dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
256: dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
257: dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
258: dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
259: dnssec-lookaside ( <em class="replaceable"><code>string</code></em> trust-anchor<br>
260: <em class="replaceable"><code>string</code></em> | auto | no );<br>
261: dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
262: dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
263: dnssec-update-mode ( maintain | no-resign );<br>
264: dnssec-validation ( yes | no | auto );<br>
265: dnstap { ( all | auth | client | forwarder |<br>
266: resolver ) [ ( query | response ) ]; ... };<br>
267: dnstap-identity ( <em class="replaceable"><code>quoted_string</code></em> | none |<br>
268: hostname );<br>
269: dnstap-output ( file | unix ) <em class="replaceable"><code>quoted_string</code></em> [<br>
270: size ( unlimited | <em class="replaceable"><code>size</code></em> ) ] [ versions (<br>
271: unlimited | <em class="replaceable"><code>integer</code></em> ) ] [ suffix ( increment<br>
272: | timestamp ) ];<br>
273: dnstap-version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
274: dscp <em class="replaceable"><code>integer</code></em>;<br>
275: dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
276: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
277: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
278: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
279: dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
280: edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
281: empty-contact <em class="replaceable"><code>string</code></em>;<br>
282: empty-server <em class="replaceable"><code>string</code></em>;<br>
283: empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
284: fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
285: fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
286: fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
287: files ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
288: filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
289: filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
290: filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
291: flush-zones-on-shutdown <em class="replaceable"><code>boolean</code></em>;<br>
292: forward ( first | only );<br>
293: forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
294: | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
295: fstrm-set-buffer-hint <em class="replaceable"><code>integer</code></em>;<br>
296: fstrm-set-flush-timeout <em class="replaceable"><code>integer</code></em>;<br>
297: fstrm-set-input-queue-size <em class="replaceable"><code>integer</code></em>;<br>
298: fstrm-set-output-notify-threshold <em class="replaceable"><code>integer</code></em>;<br>
299: fstrm-set-output-queue-model ( mpsc | spsc );<br>
300: fstrm-set-output-queue-size <em class="replaceable"><code>integer</code></em>;<br>
301: fstrm-set-reopen-interval <em class="replaceable"><code>integer</code></em>;<br>
302: geoip-directory ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
303: geoip-use-ecs <em class="replaceable"><code>boolean</code></em>;<br>
304: glue-cache <em class="replaceable"><code>boolean</code></em>;<br>
305: heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
306: hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
307: inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
308: interface-interval <em class="replaceable"><code>integer</code></em>;<br>
309: ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
310: keep-response-order { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
311: key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
312: lame-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
313: listen-on [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
314: <em class="replaceable"><code>integer</code></em> ] {<br>
315: <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
316: listen-on-v6 [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
317: <em class="replaceable"><code>integer</code></em> ] {<br>
318: <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
319: lmdb-mapsize <em class="replaceable"><code>sizeval</code></em>;<br>
320: lock-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
321: managed-keys-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
322: masterfile-format ( map | raw | text );<br>
323: masterfile-style ( full | relative );<br>
324: match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
325: max-cache-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> | <em class="replaceable"><code>percentage</code></em> );<br>
326: max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
327: max-clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
328: max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
329: max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
330: max-records <em class="replaceable"><code>integer</code></em>;<br>
331: max-recursion-depth <em class="replaceable"><code>integer</code></em>;<br>
332: max-recursion-queries <em class="replaceable"><code>integer</code></em>;<br>
333: max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
334: max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
335: max-rsa-exponent-size <em class="replaceable"><code>integer</code></em>;<br>
336: max-stale-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
337: max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
338: max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
339: max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
340: max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
341: max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
342: max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
343: memstatistics <em class="replaceable"><code>boolean</code></em>;<br>
344: memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
345: message-compression <em class="replaceable"><code>boolean</code></em>;<br>
346: min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
347: min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
348: minimal-any <em class="replaceable"><code>boolean</code></em>;<br>
349: minimal-responses ( no-auth | no-auth-recursive | <em class="replaceable"><code>boolean</code></em> );<br>
350: multi-master <em class="replaceable"><code>boolean</code></em>;<br>
351: new-zones-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
352: no-case-compress { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
353: nocookie-udp-size <em class="replaceable"><code>integer</code></em>;<br>
354: notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
355: notify-delay <em class="replaceable"><code>integer</code></em>;<br>
356: notify-rate <em class="replaceable"><code>integer</code></em>;<br>
357: notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
358: dscp <em class="replaceable"><code>integer</code></em> ];<br>
359: notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
360: [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
361: notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
362: nta-lifetime <em class="replaceable"><code>ttlval</code></em>;<br>
363: nta-recheck <em class="replaceable"><code>ttlval</code></em>;<br>
364: nxdomain-redirect <em class="replaceable"><code>string</code></em>;<br>
365: pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
366: port <em class="replaceable"><code>integer</code></em>;<br>
367: preferred-glue <em class="replaceable"><code>string</code></em>;<br>
368: prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
369: provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
370: query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
371: <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
372: port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
373: query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
374: <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
375: port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
376: querylog <em class="replaceable"><code>boolean</code></em>;<br>
377: random-device ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
378: rate-limit {<br>
379: all-per-second <em class="replaceable"><code>integer</code></em>;<br>
380: errors-per-second <em class="replaceable"><code>integer</code></em>;<br>
381: exempt-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
382: ipv4-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
383: ipv6-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
384: log-only <em class="replaceable"><code>boolean</code></em>;<br>
385: max-table-size <em class="replaceable"><code>integer</code></em>;<br>
386: min-table-size <em class="replaceable"><code>integer</code></em>;<br>
387: nodata-per-second <em class="replaceable"><code>integer</code></em>;<br>
388: nxdomains-per-second <em class="replaceable"><code>integer</code></em>;<br>
389: qps-scale <em class="replaceable"><code>integer</code></em>;<br>
390: referrals-per-second <em class="replaceable"><code>integer</code></em>;<br>
391: responses-per-second <em class="replaceable"><code>integer</code></em>;<br>
392: slip <em class="replaceable"><code>integer</code></em>;<br>
393: window <em class="replaceable"><code>integer</code></em>;<br>
394: };<br>
395: recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
396: recursion <em class="replaceable"><code>boolean</code></em>;<br>
397: recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
398: request-expire <em class="replaceable"><code>boolean</code></em>;<br>
399: request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
400: request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
401: require-server-cookie <em class="replaceable"><code>boolean</code></em>;<br>
402: reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
403: resolver-nonbackoff-tries <em class="replaceable"><code>integer</code></em>;<br>
404: resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
405: resolver-retry-interval <em class="replaceable"><code>integer</code></em>;<br>
406: response-padding { <em class="replaceable"><code>address_match_element</code></em>; ... } block-size<br>
407: <em class="replaceable"><code>integer</code></em>;<br>
408: response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ log <em class="replaceable"><code>boolean</code></em> ] [<br>
409: max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
410: policy ( cname | disabled | drop | given | no-op | nodata |<br>
411: nxdomain | passthru | tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [<br>
412: recursive-only <em class="replaceable"><code>boolean</code></em> ] [ nsip-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
413: nsdname-enable <em class="replaceable"><code>boolean</code></em> ]; ... } [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [<br>
414: max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
415: min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
416: qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
417: nsip-enable <em class="replaceable"><code>boolean</code></em> ] [ nsdname-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
418: dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
419: } ];<br>
420: root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
421: root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
422: rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
423: <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
424: secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
425: send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
426: serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
427: serial-update-method ( date | increment | unixtime );<br>
428: server-id ( <em class="replaceable"><code>quoted_string</code></em> | none | hostname );<br>
429: servfail-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
430: session-keyalg <em class="replaceable"><code>string</code></em>;<br>
431: session-keyfile ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
432: session-keyname <em class="replaceable"><code>string</code></em>;<br>
433: sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
434: sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
435: sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
436: sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
437: sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
438: stacksize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
439: stale-answer-enable <em class="replaceable"><code>boolean</code></em>;<br>
440: stale-answer-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
441: startup-notify-rate <em class="replaceable"><code>integer</code></em>;<br>
442: statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
443: synth-from-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
444: tcp-advertised-timeout <em class="replaceable"><code>integer</code></em>;<br>
445: tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
446: tcp-idle-timeout <em class="replaceable"><code>integer</code></em>;<br>
447: tcp-initial-timeout <em class="replaceable"><code>integer</code></em>;<br>
448: tcp-keepalive-timeout <em class="replaceable"><code>integer</code></em>;<br>
449: tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
450: tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
451: tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
452: tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
453: tkey-gssapi-keytab <em class="replaceable"><code>quoted_string</code></em>;<br>
454: transfer-format ( many-answers | one-answer );<br>
455: transfer-message-size <em class="replaceable"><code>integer</code></em>;<br>
456: transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
457: dscp <em class="replaceable"><code>integer</code></em> ];<br>
458: transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
459: ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
460: transfers-in <em class="replaceable"><code>integer</code></em>;<br>
461: transfers-out <em class="replaceable"><code>integer</code></em>;<br>
462: transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
463: trust-anchor-telemetry <em class="replaceable"><code>boolean</code></em>; // experimental<br>
464: try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
465: update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
466: use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
467: use-v4-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
468: use-v6-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
469: v6-bias <em class="replaceable"><code>integer</code></em>;<br>
470: version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
471: zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
472: zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
473: zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
474: };<br>
475: </p></div>
476: </div>
477:
478: <div class="refsection">
479: <a name="id-1.13.27.17"></a><h2>SERVER</h2>
480:
481: <div class="literallayout"><p><br>
482: server <em class="replaceable"><code>netprefix</code></em> {<br>
483: bogus <em class="replaceable"><code>boolean</code></em>;<br>
484: edns <em class="replaceable"><code>boolean</code></em>;<br>
485: edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
486: edns-version <em class="replaceable"><code>integer</code></em>;<br>
487: keys <em class="replaceable"><code>server_key</code></em>;<br>
488: max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
489: notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
490: dscp <em class="replaceable"><code>integer</code></em> ];<br>
491: notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
492: [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
493: padding <em class="replaceable"><code>integer</code></em>;<br>
494: provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
495: query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
496: <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
497: port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
498: query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
499: <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
500: port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
501: request-expire <em class="replaceable"><code>boolean</code></em>;<br>
502: request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
503: request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
504: send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
505: tcp-keepalive <em class="replaceable"><code>boolean</code></em>;<br>
506: tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
507: transfer-format ( many-answers | one-answer );<br>
508: transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
509: dscp <em class="replaceable"><code>integer</code></em> ];<br>
510: transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
511: ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
512: transfers <em class="replaceable"><code>integer</code></em>;<br>
513: };<br>
514: </p></div>
515: </div>
516:
517: <div class="refsection">
518: <a name="id-1.13.27.18"></a><h2>STATISTICS-CHANNELS</h2>
519:
520: <div class="literallayout"><p><br>
521: statistics-channels {<br>
522: inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
523: * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
524: allow { <em class="replaceable"><code>address_match_element</code></em>; ...<br>
525: } ];<br>
526: };<br>
527: </p></div>
528: </div>
529:
530: <div class="refsection">
531: <a name="id-1.13.27.19"></a><h2>TRUSTED-KEYS</h2>
532:
533: <div class="literallayout"><p><br>
534: trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
535: <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
536: </p></div>
537: </div>
538:
539: <div class="refsection">
540: <a name="id-1.13.27.20"></a><h2>VIEW</h2>
541:
542: <div class="literallayout"><p><br>
543: view <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
544: allow-new-zones <em class="replaceable"><code>boolean</code></em>;<br>
545: allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
546: allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
547: allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
548: allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
549: allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
550: allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
551: allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
552: allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
553: allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
554: allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
555: also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
556: <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
557: <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
558: alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
559: ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
560: alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
561: * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
562: attach-cache <em class="replaceable"><code>string</code></em>;<br>
563: auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
564: auto-dnssec ( allow | maintain | off );<br>
565: cache-file <em class="replaceable"><code>quoted_string</code></em>;<br>
566: catalog-zones { zone <em class="replaceable"><code>quoted_string</code></em> [ default-masters [ port<br>
567: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
568: port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key<br>
569: <em class="replaceable"><code>string</code></em> ]; ... } ] [ zone-directory <em class="replaceable"><code>quoted_string</code></em> ] [<br>
570: in-memory <em class="replaceable"><code>boolean</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ]; ... };<br>
571: check-dup-records ( fail | warn | ignore );<br>
572: check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
573: check-mx ( fail | warn | ignore );<br>
574: check-mx-cname ( fail | warn | ignore );<br>
575: check-names ( master | slave | response<br>
576: ) ( fail | warn | ignore );<br>
577: check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
578: check-spf ( warn | ignore );<br>
579: check-srv-cname ( fail | warn | ignore );<br>
580: check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
581: cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
582: clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
583: deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
584: except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
585: deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
586: <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
587: dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
588: disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
589: ... };<br>
590: disable-ds-digests <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
591: ... };<br>
592: disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
593: dlz <em class="replaceable"><code>string</code></em> {<br>
594: database <em class="replaceable"><code>string</code></em>;<br>
595: search <em class="replaceable"><code>boolean</code></em>;<br>
596: };<br>
597: dns64 <em class="replaceable"><code>netprefix</code></em> {<br>
598: break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
599: clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
600: exclude { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
601: mapped { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
602: recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
603: suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
604: };<br>
605: dns64-contact <em class="replaceable"><code>string</code></em>;<br>
606: dns64-server <em class="replaceable"><code>string</code></em>;<br>
607: dnsrps-enable <em class="replaceable"><code>boolean</code></em>;<br>
608: dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em> };<br>
609: dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
610: dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
611: dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
612: dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
613: dnssec-lookaside ( <em class="replaceable"><code>string</code></em> trust-anchor<br>
614: <em class="replaceable"><code>string</code></em> | auto | no );<br>
615: dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
616: dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
617: dnssec-update-mode ( maintain | no-resign );<br>
618: dnssec-validation ( yes | no | auto );<br>
619: dnstap { ( all | auth | client | forwarder |<br>
620: resolver ) [ ( query | response ) ]; ... };<br>
621: dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
622: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
623: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
624: <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
625: dyndb <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>quoted_string</code></em> {<br>
626: <em class="replaceable"><code>unspecified-text</code></em> };<br>
627: edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
628: empty-contact <em class="replaceable"><code>string</code></em>;<br>
629: empty-server <em class="replaceable"><code>string</code></em>;<br>
630: empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
631: fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
632: fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
633: fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
634: filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
635: filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
636: filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
637: forward ( first | only );<br>
638: forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
639: | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
640: glue-cache <em class="replaceable"><code>boolean</code></em>;<br>
641: inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
642: ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
643: key <em class="replaceable"><code>string</code></em> {<br>
644: algorithm <em class="replaceable"><code>string</code></em>;<br>
645: secret <em class="replaceable"><code>string</code></em>;<br>
646: };<br>
647: key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
648: lame-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
649: lmdb-mapsize <em class="replaceable"><code>sizeval</code></em>;<br>
650: managed-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em><br>
651: <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
652: <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
653: masterfile-format ( map | raw | text );<br>
654: masterfile-style ( full | relative );<br>
655: match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
656: match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
657: match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
658: max-cache-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> | <em class="replaceable"><code>percentage</code></em> );<br>
659: max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
660: max-clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
661: max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
662: max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
663: max-records <em class="replaceable"><code>integer</code></em>;<br>
664: max-recursion-depth <em class="replaceable"><code>integer</code></em>;<br>
665: max-recursion-queries <em class="replaceable"><code>integer</code></em>;<br>
666: max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
667: max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
668: max-stale-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
669: max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
670: max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
671: max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
672: max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
673: max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
674: max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
675: message-compression <em class="replaceable"><code>boolean</code></em>;<br>
676: min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
677: min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
678: minimal-any <em class="replaceable"><code>boolean</code></em>;<br>
679: minimal-responses ( no-auth | no-auth-recursive | <em class="replaceable"><code>boolean</code></em> );<br>
680: multi-master <em class="replaceable"><code>boolean</code></em>;<br>
681: new-zones-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
682: no-case-compress { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
683: nocookie-udp-size <em class="replaceable"><code>integer</code></em>;<br>
684: notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
685: notify-delay <em class="replaceable"><code>integer</code></em>;<br>
686: notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
687: dscp <em class="replaceable"><code>integer</code></em> ];<br>
688: notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
689: [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
690: notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
691: nta-lifetime <em class="replaceable"><code>ttlval</code></em>;<br>
692: nta-recheck <em class="replaceable"><code>ttlval</code></em>;<br>
693: nxdomain-redirect <em class="replaceable"><code>string</code></em>;<br>
694: preferred-glue <em class="replaceable"><code>string</code></em>;<br>
695: prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
696: provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
697: query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
698: <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
699: port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
700: query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
701: <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
702: port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
703: rate-limit {<br>
704: all-per-second <em class="replaceable"><code>integer</code></em>;<br>
705: errors-per-second <em class="replaceable"><code>integer</code></em>;<br>
706: exempt-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
707: ipv4-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
708: ipv6-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
709: log-only <em class="replaceable"><code>boolean</code></em>;<br>
710: max-table-size <em class="replaceable"><code>integer</code></em>;<br>
711: min-table-size <em class="replaceable"><code>integer</code></em>;<br>
712: nodata-per-second <em class="replaceable"><code>integer</code></em>;<br>
713: nxdomains-per-second <em class="replaceable"><code>integer</code></em>;<br>
714: qps-scale <em class="replaceable"><code>integer</code></em>;<br>
715: referrals-per-second <em class="replaceable"><code>integer</code></em>;<br>
716: responses-per-second <em class="replaceable"><code>integer</code></em>;<br>
717: slip <em class="replaceable"><code>integer</code></em>;<br>
718: window <em class="replaceable"><code>integer</code></em>;<br>
719: };<br>
720: recursion <em class="replaceable"><code>boolean</code></em>;<br>
721: request-expire <em class="replaceable"><code>boolean</code></em>;<br>
722: request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
723: request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
724: require-server-cookie <em class="replaceable"><code>boolean</code></em>;<br>
725: resolver-nonbackoff-tries <em class="replaceable"><code>integer</code></em>;<br>
726: resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
727: resolver-retry-interval <em class="replaceable"><code>integer</code></em>;<br>
728: response-padding { <em class="replaceable"><code>address_match_element</code></em>; ... } block-size<br>
729: <em class="replaceable"><code>integer</code></em>;<br>
730: response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ log <em class="replaceable"><code>boolean</code></em> ] [<br>
731: max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
732: policy ( cname | disabled | drop | given | no-op | nodata |<br>
733: nxdomain | passthru | tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [<br>
734: recursive-only <em class="replaceable"><code>boolean</code></em> ] [ nsip-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
735: nsdname-enable <em class="replaceable"><code>boolean</code></em> ]; ... } [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [<br>
736: max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
737: min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
738: qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
739: nsip-enable <em class="replaceable"><code>boolean</code></em> ] [ nsdname-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
740: dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
741: } ];<br>
742: root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
743: root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
744: rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
745: <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
746: send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
747: serial-update-method ( date | increment | unixtime );<br>
748: server <em class="replaceable"><code>netprefix</code></em> {<br>
749: bogus <em class="replaceable"><code>boolean</code></em>;<br>
750: edns <em class="replaceable"><code>boolean</code></em>;<br>
751: edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
752: edns-version <em class="replaceable"><code>integer</code></em>;<br>
753: keys <em class="replaceable"><code>server_key</code></em>;<br>
754: max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
755: notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
756: ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
757: notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
758: | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
759: padding <em class="replaceable"><code>integer</code></em>;<br>
760: provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
761: query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port<br>
762: ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
763: <em class="replaceable"><code>ipv4_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
764: dscp <em class="replaceable"><code>integer</code></em> ];<br>
765: query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<br>
766: port ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
767: <em class="replaceable"><code>ipv6_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
768: dscp <em class="replaceable"><code>integer</code></em> ];<br>
769: request-expire <em class="replaceable"><code>boolean</code></em>;<br>
770: request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
771: request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
772: send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
773: tcp-keepalive <em class="replaceable"><code>boolean</code></em>;<br>
774: tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
775: transfer-format ( many-answers | one-answer );<br>
776: transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
777: * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
778: transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
779: <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
780: transfers <em class="replaceable"><code>integer</code></em>;<br>
781: };<br>
782: servfail-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
783: sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
784: sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
785: sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
786: sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
787: sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
788: stale-answer-enable <em class="replaceable"><code>boolean</code></em>;<br>
789: stale-answer-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
790: synth-from-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
791: transfer-format ( many-answers | one-answer );<br>
792: transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
793: dscp <em class="replaceable"><code>integer</code></em> ];<br>
794: transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
795: ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
796: trust-anchor-telemetry <em class="replaceable"><code>boolean</code></em>; // experimental<br>
797: trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
798: <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>;<br>
799: ... };<br>
800: try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
801: update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
802: use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
803: v6-bias <em class="replaceable"><code>integer</code></em>;<br>
804: zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
805: zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
806: zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
807: allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
808: allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
809: allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
810: allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
811: allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
812: allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
813: also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
814: <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] |<br>
815: <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ];<br>
816: ... };<br>
817: alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
818: <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
819: alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
820: <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
821: auto-dnssec ( allow | maintain | off );<br>
822: check-dup-records ( fail | warn | ignore );<br>
823: check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
824: check-mx ( fail | warn | ignore );<br>
825: check-mx-cname ( fail | warn | ignore );<br>
826: check-names ( fail | warn | ignore );<br>
827: check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
828: check-spf ( warn | ignore );<br>
829: check-srv-cname ( fail | warn | ignore );<br>
830: check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
831: database <em class="replaceable"><code>string</code></em>;<br>
832: delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
833: dialup ( notify | notify-passive | passive | refresh |<br>
834: <em class="replaceable"><code>boolean</code></em> );<br>
835: dlz <em class="replaceable"><code>string</code></em>;<br>
836: dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
837: dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
838: dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
839: dnssec-update-mode ( maintain | no-resign );<br>
840: file <em class="replaceable"><code>quoted_string</code></em>;<br>
841: forward ( first | only );<br>
842: forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
843: <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [<br>
844: dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
845: in-view <em class="replaceable"><code>string</code></em>;<br>
846: inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
847: ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
848: journal <em class="replaceable"><code>quoted_string</code></em>;<br>
849: key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
850: masterfile-format ( map | raw | text );<br>
851: masterfile-style ( full | relative );<br>
852: masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em><br>
853: | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [<br>
854: port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
855: max-ixfr-log-size ( default | unlimited |<br>
856: max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
857: max-records <em class="replaceable"><code>integer</code></em>;<br>
858: max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
859: max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
860: max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
861: max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
862: max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
863: max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
864: max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
865: min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
866: min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
867: multi-master <em class="replaceable"><code>boolean</code></em>;<br>
868: notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
869: notify-delay <em class="replaceable"><code>integer</code></em>;<br>
870: notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
871: ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
872: notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
873: | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
874: notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
875: pubkey <em class="replaceable"><code>integer</code></em><br>
876: <em class="replaceable"><code>integer</code></em><br>
877: <em class="replaceable"><code>integer</code></em><br>
878: request-expire <em class="replaceable"><code>boolean</code></em>;<br>
879: request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
880: serial-update-method ( date | increment | unixtime );<br>
881: server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<br>
882: port <em class="replaceable"><code>integer</code></em> ]; ... };<br>
883: server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
884: sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
885: sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
886: sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
887: sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
888: transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
889: * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
890: transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
891: <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
892: try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
893: type ( delegation-only | forward | hint | master | redirect<br>
894: | slave | static-stub | stub );<br>
895: update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
896: update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> (<br>
897: 6to4-self | external | krb5-self | krb5-subdomain |<br>
898: ms-self | ms-subdomain | name | self | selfsub |<br>
899: selfwild | subdomain | tcp-self | wildcard | zonesub )<br>
900: [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
901: use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
902: zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
903: zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
904: };<br>
905: zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
906: };<br>
907: </p></div>
908: </div>
909:
910: <div class="refsection">
911: <a name="id-1.13.27.21"></a><h2>ZONE</h2>
912:
913: <div class="literallayout"><p><br>
914: zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
915: allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
916: allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
917: allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
918: allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
919: allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
920: allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
921: also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
922: <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
923: <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
924: alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
925: ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
926: alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
927: * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
928: auto-dnssec ( allow | maintain | off );<br>
929: check-dup-records ( fail | warn | ignore );<br>
930: check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
931: check-mx ( fail | warn | ignore );<br>
932: check-mx-cname ( fail | warn | ignore );<br>
933: check-names ( fail | warn | ignore );<br>
934: check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
935: check-spf ( warn | ignore );<br>
936: check-srv-cname ( fail | warn | ignore );<br>
937: check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
938: database <em class="replaceable"><code>string</code></em>;<br>
939: delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
940: dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
941: dlz <em class="replaceable"><code>string</code></em>;<br>
942: dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
943: dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
944: dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
945: dnssec-update-mode ( maintain | no-resign );<br>
946: file <em class="replaceable"><code>quoted_string</code></em>;<br>
947: forward ( first | only );<br>
948: forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
949: | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
950: in-view <em class="replaceable"><code>string</code></em>;<br>
951: inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
952: ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
953: journal <em class="replaceable"><code>quoted_string</code></em>;<br>
954: key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
955: masterfile-format ( map | raw | text );<br>
956: masterfile-style ( full | relative );<br>
957: masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
958: <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
959: <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
960: max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
961: max-records <em class="replaceable"><code>integer</code></em>;<br>
962: max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
963: max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
964: max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
965: max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
966: max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
967: max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
968: max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
969: min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
970: min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
971: multi-master <em class="replaceable"><code>boolean</code></em>;<br>
972: notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
973: notify-delay <em class="replaceable"><code>integer</code></em>;<br>
974: notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
975: dscp <em class="replaceable"><code>integer</code></em> ];<br>
976: notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
977: [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
978: notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
979: pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
980: request-expire <em class="replaceable"><code>boolean</code></em>;<br>
981: request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
982: serial-update-method ( date | increment | unixtime );<br>
983: server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port<br>
984: <em class="replaceable"><code>integer</code></em> ]; ... };<br>
985: server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
986: sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
987: sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
988: sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
989: sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
990: transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
991: dscp <em class="replaceable"><code>integer</code></em> ];<br>
992: transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
993: ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
994: try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
995: type ( delegation-only | forward | hint | master | redirect | slave<br>
996: | static-stub | stub );<br>
997: update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
998: update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self |<br>
999: external | krb5-self | krb5-subdomain | ms-self | ms-subdomain<br>
1000: | name | self | selfsub | selfwild | subdomain | tcp-self |<br>
1001: wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
1002: use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
1003: zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
1004: zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
1005: };<br>
1006: </p></div>
1007: </div>
1008:
1009: <div class="refsection">
1010: <a name="id-1.13.27.22"></a><h2>FILES</h2>
1011:
1012: <p><code class="filename">/etc/named.conf</code>
1013: </p>
1014: </div>
1015:
1016: <div class="refsection">
1017: <a name="id-1.13.27.23"></a><h2>SEE ALSO</h2>
1018:
1019: <p><span class="citerefentry">
1020: <span class="refentrytitle">ddns-confgen</span>(8)
1021: </span>,
1022: <span class="citerefentry">
1023: <span class="refentrytitle">named</span>(8)
1024: </span>,
1025: <span class="citerefentry">
1026: <span class="refentrytitle">named-checkconf</span>(8)
1027: </span>,
1028: <span class="citerefentry">
1029: <span class="refentrytitle">rndc</span>(8)
1030: </span>,
1031: <span class="citerefentry">
1032: <span class="refentrytitle">rndc-confgen</span>(8)
1033: </span>,
1034: <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
1035: </p>
1036: </div>
1037:
1038: </div>
1039: <div class="navfooter">
1040: <hr>
1041: <table width="100%" summary="Navigation footer">
1042: <tr>
1043: <td width="40%" align="left">
1044: <a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
1045: <td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch12.html">Up</a></td>
1046: <td width="40%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
1047: </td>
1048: </tr>
1049: <tr>
1050: <td width="40%" align="left" valign="top">
1051: <span class="application">named-rrchecker</span> </td>
1052: <td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
1053: <td width="40%" align="right" valign="top"> <span class="application">named</span>
1054: </td>
1055: </tr>
1056: </table>
1057: </div>
1058: <p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2-P1</p>
1059: </body>
1060: </html>
CVSweb <webmaster@jp.NetBSD.org>