[BACK]Return to man.named.conf.html CVS log [TXT][DIR] Up to [cvs.NetBSD.org] / src / external / mpl / bind / dist / doc / arm

Annotation of src/external/mpl/bind/dist/doc/arm/man.named.conf.html, Revision 1.1.1.1

1.1       christos    1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
                      2: <!--
                      3:  - Copyright (C) 2000-2018 Internet Systems Consortium, Inc. ("ISC")
                      4:  -
                      5:  - This Source Code Form is subject to the terms of the Mozilla Public
                      6:  - License, v. 2.0. If a copy of the MPL was not distributed with this
                      7:  - file, You can obtain one at http://mozilla.org/MPL/2.0/.
                      8: -->
                      9: <html lang="en">
                     10: <head>
                     11: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
                     12: <title>named.conf</title>
                     13: <meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
                     14: <link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
                     15: <link rel="up" href="Bv9ARM.ch12.html" title="Manual pages">
                     16: <link rel="prev" href="man.named-rrchecker.html" title="named-rrchecker">
                     17: <link rel="next" href="man.named.html" title="named">
                     18: </head>
                     19: <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
                     20: <div class="navheader">
                     21: <table width="100%" summary="Navigation header">
                     22: <tr><th colspan="3" align="center"><code class="filename">named.conf</code></th></tr>
                     23: <tr>
                     24: <td width="20%" align="left">
                     25: <a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
                     26: <th width="60%" align="center">Manual pages</th>
                     27: <td width="20%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
                     28: </td>
                     29: </tr>
                     30: </table>
                     31: <hr>
                     32: </div>
                     33: <div class="refentry">
                     34: <a name="man.named.conf"></a><div class="titlepage"></div>
                     35:
                     36:
                     37:
                     38:
                     39:
                     40:   <div class="refnamediv">
                     41: <h2>Name</h2>
                     42: <p>
                     43:     <code class="filename">named.conf</code>
                     44:      &#8212; configuration file for <span class="command"><strong>named</strong></span>
                     45:   </p>
                     46: </div>
                     47:
                     48:
                     49:
                     50:   <div class="refsynopsisdiv">
                     51: <h2>Synopsis</h2>
                     52:     <div class="cmdsynopsis"><p>
                     53:       <code class="command">named.conf</code>
                     54:     </p></div>
                     55:   </div>
                     56:
                     57:   <div class="refsection">
                     58: <a name="id-1.13.27.7"></a><h2>DESCRIPTION</h2>
                     59:
                     60:     <p><code class="filename">named.conf</code> is the configuration file
                     61:       for
                     62:       <span class="command"><strong>named</strong></span>.  Statements are enclosed
                     63:       in braces and terminated with a semi-colon.  Clauses in
                     64:       the statements are also semi-colon terminated.  The usual
                     65:       comment styles are supported:
                     66:     </p>
                     67:     <p>
                     68:       C style: /* */
                     69:     </p>
                     70:     <p>
                     71:       C++ style: // to end of line
                     72:     </p>
                     73:     <p>
                     74:       Unix style: # to end of line
                     75:     </p>
                     76:   </div>
                     77:
                     78:   <div class="refsection">
                     79: <a name="id-1.13.27.8"></a><h2>ACL</h2>
                     80:
                     81:     <div class="literallayout"><p><br>
                     82: acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                     83: </p></div>
                     84:   </div>
                     85:
                     86:   <div class="refsection">
                     87: <a name="id-1.13.27.9"></a><h2>CONTROLS</h2>
                     88:
                     89:     <div class="literallayout"><p><br>
                     90: controls {<br>
                     91:        inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
                     92:            * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] allow<br>
                     93:            { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
                     94:            keys { <em class="replaceable"><code>string</code></em>; ... } ] [ read-only<br>
                     95:            <em class="replaceable"><code>boolean</code></em> ];<br>
                     96:        unix <em class="replaceable"><code>quoted_string</code></em> perm <em class="replaceable"><code>integer</code></em><br>
                     97:            owner <em class="replaceable"><code>integer</code></em> group <em class="replaceable"><code>integer</code></em> [<br>
                     98:            keys { <em class="replaceable"><code>string</code></em>; ... } ] [ read-only<br>
                     99:            <em class="replaceable"><code>boolean</code></em> ];<br>
                    100: };<br>
                    101: </p></div>
                    102:   </div>
                    103:
                    104:   <div class="refsection">
                    105: <a name="id-1.13.27.10"></a><h2>DLZ</h2>
                    106:
                    107:     <div class="literallayout"><p><br>
                    108: dlz <em class="replaceable"><code>string</code></em> {<br>
                    109:        database <em class="replaceable"><code>string</code></em>;<br>
                    110:        search <em class="replaceable"><code>boolean</code></em>;<br>
                    111: };<br>
                    112: </p></div>
                    113:   </div>
                    114:
                    115:   <div class="refsection">
                    116: <a name="id-1.13.27.11"></a><h2>DYNDB</h2>
                    117:
                    118:     <div class="literallayout"><p><br>
                    119: dyndb <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>quoted_string</code></em> {<br>
                    120:     <em class="replaceable"><code>unspecified-text</code></em> };<br>
                    121: </p></div>
                    122:   </div>
                    123:
                    124:   <div class="refsection">
                    125: <a name="id-1.13.27.12"></a><h2>KEY</h2>
                    126:
                    127:     <div class="literallayout"><p><br>
                    128: key <em class="replaceable"><code>string</code></em> {<br>
                    129:        algorithm <em class="replaceable"><code>string</code></em>;<br>
                    130:        secret <em class="replaceable"><code>string</code></em>;<br>
                    131: };<br>
                    132: </p></div>
                    133:   </div>
                    134:
                    135:   <div class="refsection">
                    136: <a name="id-1.13.27.13"></a><h2>LOGGING</h2>
                    137:
                    138:     <div class="literallayout"><p><br>
                    139: logging {<br>
                    140:        category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
                    141:        channel <em class="replaceable"><code>string</code></em> {<br>
                    142:                buffered <em class="replaceable"><code>boolean</code></em>;<br>
                    143:                file <em class="replaceable"><code>quoted_string</code></em> [ versions ( unlimited | <em class="replaceable"><code>integer</code></em> ) ]<br>
                    144:                    [ size <em class="replaceable"><code>size</code></em> ] [ suffix ( increment | timestamp ) ];<br>
                    145:                null;<br>
                    146:                print-category <em class="replaceable"><code>boolean</code></em>;<br>
                    147:                print-severity <em class="replaceable"><code>boolean</code></em>;<br>
                    148:                print-time ( iso8601 | iso8601-utc | local | <em class="replaceable"><code>boolean</code></em> );<br>
                    149:                severity <em class="replaceable"><code>log_severity</code></em>;<br>
                    150:                stderr;<br>
                    151:                syslog [ <em class="replaceable"><code>syslog_facility</code></em> ];<br>
                    152:        };<br>
                    153: };<br>
                    154: </p></div>
                    155:   </div>
                    156:
                    157:
                    158:   <div class="refsection">
                    159: <a name="id-1.13.27.14"></a><h2>MANAGED-KEYS</h2>
                    160:
                    161:     <div class="literallayout"><p><br>
                    162: managed-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
                    163:     <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
                    164: </p></div>
                    165:   </div>
                    166:
                    167:   <div class="refsection">
                    168: <a name="id-1.13.27.15"></a><h2>MASTERS</h2>
                    169:
                    170:     <div class="literallayout"><p><br>
                    171: masters <em class="replaceable"><code>string</code></em> [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
                    172:     <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
                    173:     port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
                    174:     <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                    175: </p></div>
                    176:   </div>
                    177:
                    178:   <div class="refsection">
                    179: <a name="id-1.13.27.16"></a><h2>OPTIONS</h2>
                    180:
                    181:     <div class="literallayout"><p><br>
                    182: options {<br>
                    183:        allow-new-zones <em class="replaceable"><code>boolean</code></em>;<br>
                    184:        allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    185:        allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    186:        allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    187:        allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    188:        allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    189:        allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    190:        allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    191:        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    192:        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    193:        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    194:        also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
                    195:            <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
                    196:            <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                    197:        alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
                    198:            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    199:        alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
                    200:            * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    201:        answer-cookie <em class="replaceable"><code>boolean</code></em>;<br>
                    202:        attach-cache <em class="replaceable"><code>string</code></em>;<br>
                    203:        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
                    204:        auto-dnssec ( allow | maintain | off );<br>
                    205:        automatic-interface-scan <em class="replaceable"><code>boolean</code></em>;<br>
                    206:        avoid-v4-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
                    207:        avoid-v6-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
                    208:        bindkeys-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    209:        blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    210:        cache-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    211:        catalog-zones { zone <em class="replaceable"><code>quoted_string</code></em> [ default-masters [ port<br>
                    212:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
                    213:            port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key<br>
                    214:            <em class="replaceable"><code>string</code></em> ]; ... } ] [ zone-directory <em class="replaceable"><code>quoted_string</code></em> ] [<br>
                    215:            in-memory <em class="replaceable"><code>boolean</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    216:        check-dup-records ( fail | warn | ignore );<br>
                    217:        check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
                    218:        check-mx ( fail | warn | ignore );<br>
                    219:        check-mx-cname ( fail | warn | ignore );<br>
                    220:        check-names ( master | slave | response<br>
                    221:            ) ( fail | warn | ignore );<br>
                    222:        check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
                    223:        check-spf ( warn | ignore );<br>
                    224:        check-srv-cname ( fail | warn | ignore );<br>
                    225:        check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
                    226:        cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
                    227:        clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
                    228:        cookie-algorithm ( aes | sha1 | sha256 );<br>
                    229:        cookie-secret <em class="replaceable"><code>string</code></em>;<br>
                    230:        coresize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    231:        datasize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    232:        deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
                    233:            except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
                    234:        deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
                    235:            <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
                    236:        dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
                    237:        directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    238:        disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
                    239:            ... };<br>
                    240:        disable-ds-digests <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
                    241:            ... };<br>
                    242:        disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
                    243:        dns64 <em class="replaceable"><code>netprefix</code></em> {<br>
                    244:                break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
                    245:                clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    246:                exclude { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    247:                mapped { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    248:                recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
                    249:                suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
                    250:        };<br>
                    251:        dns64-contact <em class="replaceable"><code>string</code></em>;<br>
                    252:        dns64-server <em class="replaceable"><code>string</code></em>;<br>
                    253:        dnsrps-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    254:        dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em> };<br>
                    255:        dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
                    256:        dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
                    257:        dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    258:        dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
                    259:        dnssec-lookaside ( <em class="replaceable"><code>string</code></em> trust-anchor<br>
                    260:            <em class="replaceable"><code>string</code></em> | auto | no );<br>
                    261:        dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
                    262:        dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
                    263:        dnssec-update-mode ( maintain | no-resign );<br>
                    264:        dnssec-validation ( yes | no | auto );<br>
                    265:        dnstap { ( all | auth | client | forwarder |<br>
                    266:            resolver ) [ ( query | response ) ]; ... };<br>
                    267:        dnstap-identity ( <em class="replaceable"><code>quoted_string</code></em> | none |<br>
                    268:            hostname );<br>
                    269:        dnstap-output ( file | unix ) <em class="replaceable"><code>quoted_string</code></em> [<br>
                    270:            size ( unlimited | <em class="replaceable"><code>size</code></em> ) ] [ versions (<br>
                    271:            unlimited | <em class="replaceable"><code>integer</code></em> ) ] [ suffix ( increment<br>
                    272:            | timestamp ) ];<br>
                    273:        dnstap-version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    274:        dscp <em class="replaceable"><code>integer</code></em>;<br>
                    275:        dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
                    276:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
                    277:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
                    278:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
                    279:        dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    280:        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    281:        empty-contact <em class="replaceable"><code>string</code></em>;<br>
                    282:        empty-server <em class="replaceable"><code>string</code></em>;<br>
                    283:        empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    284:        fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
                    285:        fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
                    286:        fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
                    287:        files ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    288:        filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    289:        filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
                    290:        filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
                    291:        flush-zones-on-shutdown <em class="replaceable"><code>boolean</code></em>;<br>
                    292:        forward ( first | only );<br>
                    293:        forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
                    294:            | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    295:        fstrm-set-buffer-hint <em class="replaceable"><code>integer</code></em>;<br>
                    296:        fstrm-set-flush-timeout <em class="replaceable"><code>integer</code></em>;<br>
                    297:        fstrm-set-input-queue-size <em class="replaceable"><code>integer</code></em>;<br>
                    298:        fstrm-set-output-notify-threshold <em class="replaceable"><code>integer</code></em>;<br>
                    299:        fstrm-set-output-queue-model ( mpsc | spsc );<br>
                    300:        fstrm-set-output-queue-size <em class="replaceable"><code>integer</code></em>;<br>
                    301:        fstrm-set-reopen-interval <em class="replaceable"><code>integer</code></em>;<br>
                    302:        geoip-directory ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    303:        geoip-use-ecs <em class="replaceable"><code>boolean</code></em>;<br>
                    304:        glue-cache <em class="replaceable"><code>boolean</code></em>;<br>
                    305:        heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
                    306:        hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    307:        inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
                    308:        interface-interval <em class="replaceable"><code>integer</code></em>;<br>
                    309:        ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
                    310:        keep-response-order { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    311:        key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    312:        lame-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    313:        listen-on [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
                    314:            <em class="replaceable"><code>integer</code></em> ] {<br>
                    315:            <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    316:        listen-on-v6 [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
                    317:            <em class="replaceable"><code>integer</code></em> ] {<br>
                    318:            <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    319:        lmdb-mapsize <em class="replaceable"><code>sizeval</code></em>;<br>
                    320:        lock-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    321:        managed-keys-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    322:        masterfile-format ( map | raw | text );<br>
                    323:        masterfile-style ( full | relative );<br>
                    324:        match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
                    325:        max-cache-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> | <em class="replaceable"><code>percentage</code></em> );<br>
                    326:        max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
                    327:        max-clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
                    328:        max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    329:        max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
                    330:        max-records <em class="replaceable"><code>integer</code></em>;<br>
                    331:        max-recursion-depth <em class="replaceable"><code>integer</code></em>;<br>
                    332:        max-recursion-queries <em class="replaceable"><code>integer</code></em>;<br>
                    333:        max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    334:        max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    335:        max-rsa-exponent-size <em class="replaceable"><code>integer</code></em>;<br>
                    336:        max-stale-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    337:        max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
                    338:        max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
                    339:        max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
                    340:        max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
                    341:        max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    342:        max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
                    343:        memstatistics <em class="replaceable"><code>boolean</code></em>;<br>
                    344:        memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    345:        message-compression <em class="replaceable"><code>boolean</code></em>;<br>
                    346:        min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    347:        min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    348:        minimal-any <em class="replaceable"><code>boolean</code></em>;<br>
                    349:        minimal-responses ( no-auth | no-auth-recursive | <em class="replaceable"><code>boolean</code></em> );<br>
                    350:        multi-master <em class="replaceable"><code>boolean</code></em>;<br>
                    351:        new-zones-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    352:        no-case-compress { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    353:        nocookie-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    354:        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
                    355:        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
                    356:        notify-rate <em class="replaceable"><code>integer</code></em>;<br>
                    357:        notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    358:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    359:        notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
                    360:            [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    361:        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
                    362:        nta-lifetime <em class="replaceable"><code>ttlval</code></em>;<br>
                    363:        nta-recheck <em class="replaceable"><code>ttlval</code></em>;<br>
                    364:        nxdomain-redirect <em class="replaceable"><code>string</code></em>;<br>
                    365:        pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    366:        port <em class="replaceable"><code>integer</code></em>;<br>
                    367:        preferred-glue <em class="replaceable"><code>string</code></em>;<br>
                    368:        prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
                    369:        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    370:        query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
                    371:            <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
                    372:            port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    373:        query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
                    374:            <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
                    375:            port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    376:        querylog <em class="replaceable"><code>boolean</code></em>;<br>
                    377:        random-device ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    378:        rate-limit {<br>
                    379:                all-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    380:                errors-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    381:                exempt-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    382:                ipv4-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
                    383:                ipv6-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
                    384:                log-only <em class="replaceable"><code>boolean</code></em>;<br>
                    385:                max-table-size <em class="replaceable"><code>integer</code></em>;<br>
                    386:                min-table-size <em class="replaceable"><code>integer</code></em>;<br>
                    387:                nodata-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    388:                nxdomains-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    389:                qps-scale <em class="replaceable"><code>integer</code></em>;<br>
                    390:                referrals-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    391:                responses-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    392:                slip <em class="replaceable"><code>integer</code></em>;<br>
                    393:                window <em class="replaceable"><code>integer</code></em>;<br>
                    394:        };<br>
                    395:        recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    396:        recursion <em class="replaceable"><code>boolean</code></em>;<br>
                    397:        recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
                    398:        request-expire <em class="replaceable"><code>boolean</code></em>;<br>
                    399:        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    400:        request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
                    401:        require-server-cookie <em class="replaceable"><code>boolean</code></em>;<br>
                    402:        reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
                    403:        resolver-nonbackoff-tries <em class="replaceable"><code>integer</code></em>;<br>
                    404:        resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
                    405:        resolver-retry-interval <em class="replaceable"><code>integer</code></em>;<br>
                    406:        response-padding { <em class="replaceable"><code>address_match_element</code></em>; ... } block-size<br>
                    407:            <em class="replaceable"><code>integer</code></em>;<br>
                    408:        response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ log <em class="replaceable"><code>boolean</code></em> ] [<br>
                    409:            max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
                    410:            policy ( cname | disabled | drop | given | no-op | nodata |<br>
                    411:            nxdomain | passthru | tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [<br>
                    412:            recursive-only <em class="replaceable"><code>boolean</code></em> ] [ nsip-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
                    413:            nsdname-enable <em class="replaceable"><code>boolean</code></em> ]; ... } [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [<br>
                    414:            max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
                    415:            min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
                    416:            qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
                    417:            nsip-enable <em class="replaceable"><code>boolean</code></em> ] [ nsdname-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
                    418:            dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
                    419:            } ];<br>
                    420:        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
                    421:        root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
                    422:        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
                    423:            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
                    424:        secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    425:        send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
                    426:        serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
                    427:        serial-update-method ( date | increment | unixtime );<br>
                    428:        server-id ( <em class="replaceable"><code>quoted_string</code></em> | none | hostname );<br>
                    429:        servfail-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    430:        session-keyalg <em class="replaceable"><code>string</code></em>;<br>
                    431:        session-keyfile ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    432:        session-keyname <em class="replaceable"><code>string</code></em>;<br>
                    433:        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
                    434:        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
                    435:        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
                    436:        sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
                    437:        sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    438:        stacksize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    439:        stale-answer-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    440:        stale-answer-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    441:        startup-notify-rate <em class="replaceable"><code>integer</code></em>;<br>
                    442:        statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    443:        synth-from-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
                    444:        tcp-advertised-timeout <em class="replaceable"><code>integer</code></em>;<br>
                    445:        tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
                    446:        tcp-idle-timeout <em class="replaceable"><code>integer</code></em>;<br>
                    447:        tcp-initial-timeout <em class="replaceable"><code>integer</code></em>;<br>
                    448:        tcp-keepalive-timeout <em class="replaceable"><code>integer</code></em>;<br>
                    449:        tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
                    450:        tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
                    451:        tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
                    452:        tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
                    453:        tkey-gssapi-keytab <em class="replaceable"><code>quoted_string</code></em>;<br>
                    454:        transfer-format ( many-answers | one-answer );<br>
                    455:        transfer-message-size <em class="replaceable"><code>integer</code></em>;<br>
                    456:        transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    457:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    458:        transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
                    459:            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    460:        transfers-in <em class="replaceable"><code>integer</code></em>;<br>
                    461:        transfers-out <em class="replaceable"><code>integer</code></em>;<br>
                    462:        transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
                    463:        trust-anchor-telemetry <em class="replaceable"><code>boolean</code></em>; // experimental<br>
                    464:        try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
                    465:        update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
                    466:        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                    467:        use-v4-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
                    468:        use-v6-udp-ports { <em class="replaceable"><code>portrange</code></em>; ... };<br>
                    469:        v6-bias <em class="replaceable"><code>integer</code></em>;<br>
                    470:        version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
                    471:        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                    472:        zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
                    473:        zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
                    474: };<br>
                    475: </p></div>
                    476:   </div>
                    477:
                    478:   <div class="refsection">
                    479: <a name="id-1.13.27.17"></a><h2>SERVER</h2>
                    480:
                    481:     <div class="literallayout"><p><br>
                    482: server <em class="replaceable"><code>netprefix</code></em> {<br>
                    483:        bogus <em class="replaceable"><code>boolean</code></em>;<br>
                    484:        edns <em class="replaceable"><code>boolean</code></em>;<br>
                    485:        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    486:        edns-version <em class="replaceable"><code>integer</code></em>;<br>
                    487:        keys <em class="replaceable"><code>server_key</code></em>;<br>
                    488:        max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    489:        notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    490:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    491:        notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
                    492:            [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    493:        padding <em class="replaceable"><code>integer</code></em>;<br>
                    494:        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    495:        query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
                    496:            <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
                    497:            port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    498:        query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
                    499:            <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
                    500:            port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    501:        request-expire <em class="replaceable"><code>boolean</code></em>;<br>
                    502:        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    503:        request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
                    504:        send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
                    505:        tcp-keepalive <em class="replaceable"><code>boolean</code></em>;<br>
                    506:        tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
                    507:        transfer-format ( many-answers | one-answer );<br>
                    508:        transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    509:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    510:        transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
                    511:            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    512:        transfers <em class="replaceable"><code>integer</code></em>;<br>
                    513: };<br>
                    514: </p></div>
                    515:   </div>
                    516:
                    517:   <div class="refsection">
                    518: <a name="id-1.13.27.18"></a><h2>STATISTICS-CHANNELS</h2>
                    519:
                    520:     <div class="literallayout"><p><br>
                    521: statistics-channels {<br>
                    522:        inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> |<br>
                    523:            * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    524:            allow { <em class="replaceable"><code>address_match_element</code></em>; ...<br>
                    525:            } ];<br>
                    526: };<br>
                    527: </p></div>
                    528:   </div>
                    529:
                    530:   <div class="refsection">
                    531: <a name="id-1.13.27.19"></a><h2>TRUSTED-KEYS</h2>
                    532:
                    533:     <div class="literallayout"><p><br>
                    534: trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
                    535:     <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
                    536: </p></div>
                    537:   </div>
                    538:
                    539:   <div class="refsection">
                    540: <a name="id-1.13.27.20"></a><h2>VIEW</h2>
                    541:
                    542:     <div class="literallayout"><p><br>
                    543: view <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
                    544:        allow-new-zones <em class="replaceable"><code>boolean</code></em>;<br>
                    545:        allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    546:        allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    547:        allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    548:        allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    549:        allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    550:        allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    551:        allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    552:        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    553:        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    554:        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    555:        also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
                    556:            <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
                    557:            <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                    558:        alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
                    559:            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    560:        alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
                    561:            * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    562:        attach-cache <em class="replaceable"><code>string</code></em>;<br>
                    563:        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
                    564:        auto-dnssec ( allow | maintain | off );<br>
                    565:        cache-file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    566:        catalog-zones { zone <em class="replaceable"><code>quoted_string</code></em> [ default-masters [ port<br>
                    567:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<br>
                    568:            port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key<br>
                    569:            <em class="replaceable"><code>string</code></em> ]; ... } ] [ zone-directory <em class="replaceable"><code>quoted_string</code></em> ] [<br>
                    570:            in-memory <em class="replaceable"><code>boolean</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    571:        check-dup-records ( fail | warn | ignore );<br>
                    572:        check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
                    573:        check-mx ( fail | warn | ignore );<br>
                    574:        check-mx-cname ( fail | warn | ignore );<br>
                    575:        check-names ( master | slave | response<br>
                    576:            ) ( fail | warn | ignore );<br>
                    577:        check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
                    578:        check-spf ( warn | ignore );<br>
                    579:        check-srv-cname ( fail | warn | ignore );<br>
                    580:        check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
                    581:        cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
                    582:        clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
                    583:        deny-answer-addresses { <em class="replaceable"><code>address_match_element</code></em>; ... } [<br>
                    584:            except-from { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
                    585:        deny-answer-aliases { <em class="replaceable"><code>quoted_string</code></em>; ... } [ except-from {<br>
                    586:            <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
                    587:        dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
                    588:        disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
                    589:            ... };<br>
                    590:        disable-ds-digests <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>;<br>
                    591:            ... };<br>
                    592:        disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
                    593:        dlz <em class="replaceable"><code>string</code></em> {<br>
                    594:                database <em class="replaceable"><code>string</code></em>;<br>
                    595:                search <em class="replaceable"><code>boolean</code></em>;<br>
                    596:        };<br>
                    597:        dns64 <em class="replaceable"><code>netprefix</code></em> {<br>
                    598:                break-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
                    599:                clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    600:                exclude { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    601:                mapped { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    602:                recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
                    603:                suffix <em class="replaceable"><code>ipv6_address</code></em>;<br>
                    604:        };<br>
                    605:        dns64-contact <em class="replaceable"><code>string</code></em>;<br>
                    606:        dns64-server <em class="replaceable"><code>string</code></em>;<br>
                    607:        dnsrps-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    608:        dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em> };<br>
                    609:        dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
                    610:        dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
                    611:        dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    612:        dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
                    613:        dnssec-lookaside ( <em class="replaceable"><code>string</code></em> trust-anchor<br>
                    614:            <em class="replaceable"><code>string</code></em> | auto | no );<br>
                    615:        dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
                    616:        dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
                    617:        dnssec-update-mode ( maintain | no-resign );<br>
                    618:        dnssec-validation ( yes | no | auto );<br>
                    619:        dnstap { ( all | auth | client | forwarder |<br>
                    620:            resolver ) [ ( query | response ) ]; ... };<br>
                    621:        dual-stack-servers [ port <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>quoted_string</code></em> [ port<br>
                    622:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv4_address</code></em> [ port<br>
                    623:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
                    624:            <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] ); ... };<br>
                    625:        dyndb <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>quoted_string</code></em> {<br>
                    626:            <em class="replaceable"><code>unspecified-text</code></em> };<br>
                    627:        edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    628:        empty-contact <em class="replaceable"><code>string</code></em>;<br>
                    629:        empty-server <em class="replaceable"><code>string</code></em>;<br>
                    630:        empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    631:        fetch-quota-params <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em> <em class="replaceable"><code>fixedpoint</code></em>;<br>
                    632:        fetches-per-server <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
                    633:        fetches-per-zone <em class="replaceable"><code>integer</code></em> [ ( drop | fail ) ];<br>
                    634:        filter-aaaa { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    635:        filter-aaaa-on-v4 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
                    636:        filter-aaaa-on-v6 ( break-dnssec | <em class="replaceable"><code>boolean</code></em> );<br>
                    637:        forward ( first | only );<br>
                    638:        forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
                    639:            | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    640:        glue-cache <em class="replaceable"><code>boolean</code></em>;<br>
                    641:        inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
                    642:        ixfr-from-differences ( master | slave | <em class="replaceable"><code>boolean</code></em> );<br>
                    643:        key <em class="replaceable"><code>string</code></em> {<br>
                    644:                algorithm <em class="replaceable"><code>string</code></em>;<br>
                    645:                secret <em class="replaceable"><code>string</code></em>;<br>
                    646:        };<br>
                    647:        key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    648:        lame-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    649:        lmdb-mapsize <em class="replaceable"><code>sizeval</code></em>;<br>
                    650:        managed-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em><br>
                    651:            <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
                    652:            <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
                    653:        masterfile-format ( map | raw | text );<br>
                    654:        masterfile-style ( full | relative );<br>
                    655:        match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    656:        match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    657:        match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
                    658:        max-cache-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> | <em class="replaceable"><code>percentage</code></em> );<br>
                    659:        max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
                    660:        max-clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
                    661:        max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    662:        max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
                    663:        max-records <em class="replaceable"><code>integer</code></em>;<br>
                    664:        max-recursion-depth <em class="replaceable"><code>integer</code></em>;<br>
                    665:        max-recursion-queries <em class="replaceable"><code>integer</code></em>;<br>
                    666:        max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    667:        max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    668:        max-stale-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    669:        max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
                    670:        max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
                    671:        max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
                    672:        max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
                    673:        max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    674:        max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
                    675:        message-compression <em class="replaceable"><code>boolean</code></em>;<br>
                    676:        min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    677:        min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    678:        minimal-any <em class="replaceable"><code>boolean</code></em>;<br>
                    679:        minimal-responses ( no-auth | no-auth-recursive | <em class="replaceable"><code>boolean</code></em> );<br>
                    680:        multi-master <em class="replaceable"><code>boolean</code></em>;<br>
                    681:        new-zones-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    682:        no-case-compress { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    683:        nocookie-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    684:        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
                    685:        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
                    686:        notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    687:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    688:        notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
                    689:            [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    690:        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
                    691:        nta-lifetime <em class="replaceable"><code>ttlval</code></em>;<br>
                    692:        nta-recheck <em class="replaceable"><code>ttlval</code></em>;<br>
                    693:        nxdomain-redirect <em class="replaceable"><code>string</code></em>;<br>
                    694:        preferred-glue <em class="replaceable"><code>string</code></em>;<br>
                    695:        prefetch <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
                    696:        provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    697:        query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
                    698:            <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) ]<br>
                    699:            port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    700:        query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
                    701:            <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) ]<br>
                    702:            port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    703:        rate-limit {<br>
                    704:                all-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    705:                errors-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    706:                exempt-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    707:                ipv4-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
                    708:                ipv6-prefix-length <em class="replaceable"><code>integer</code></em>;<br>
                    709:                log-only <em class="replaceable"><code>boolean</code></em>;<br>
                    710:                max-table-size <em class="replaceable"><code>integer</code></em>;<br>
                    711:                min-table-size <em class="replaceable"><code>integer</code></em>;<br>
                    712:                nodata-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    713:                nxdomains-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    714:                qps-scale <em class="replaceable"><code>integer</code></em>;<br>
                    715:                referrals-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    716:                responses-per-second <em class="replaceable"><code>integer</code></em>;<br>
                    717:                slip <em class="replaceable"><code>integer</code></em>;<br>
                    718:                window <em class="replaceable"><code>integer</code></em>;<br>
                    719:        };<br>
                    720:        recursion <em class="replaceable"><code>boolean</code></em>;<br>
                    721:        request-expire <em class="replaceable"><code>boolean</code></em>;<br>
                    722:        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    723:        request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
                    724:        require-server-cookie <em class="replaceable"><code>boolean</code></em>;<br>
                    725:        resolver-nonbackoff-tries <em class="replaceable"><code>integer</code></em>;<br>
                    726:        resolver-query-timeout <em class="replaceable"><code>integer</code></em>;<br>
                    727:        resolver-retry-interval <em class="replaceable"><code>integer</code></em>;<br>
                    728:        response-padding { <em class="replaceable"><code>address_match_element</code></em>; ... } block-size<br>
                    729:            <em class="replaceable"><code>integer</code></em>;<br>
                    730:        response-policy { zone <em class="replaceable"><code>quoted_string</code></em> [ log <em class="replaceable"><code>boolean</code></em> ] [<br>
                    731:            max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
                    732:            policy ( cname | disabled | drop | given | no-op | nodata |<br>
                    733:            nxdomain | passthru | tcp-only <em class="replaceable"><code>quoted_string</code></em> ) ] [<br>
                    734:            recursive-only <em class="replaceable"><code>boolean</code></em> ] [ nsip-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
                    735:            nsdname-enable <em class="replaceable"><code>boolean</code></em> ]; ... } [ break-dnssec <em class="replaceable"><code>boolean</code></em> ] [<br>
                    736:            max-policy-ttl <em class="replaceable"><code>integer</code></em> ] [ min-update-interval <em class="replaceable"><code>integer</code></em> ] [<br>
                    737:            min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
                    738:            qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ] [<br>
                    739:            nsip-enable <em class="replaceable"><code>boolean</code></em> ] [ nsdname-enable <em class="replaceable"><code>boolean</code></em> ] [<br>
                    740:            dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
                    741:            } ];<br>
                    742:        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
                    743:        root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
                    744:        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
                    745:            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
                    746:        send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
                    747:        serial-update-method ( date | increment | unixtime );<br>
                    748:        server <em class="replaceable"><code>netprefix</code></em> {<br>
                    749:                bogus <em class="replaceable"><code>boolean</code></em>;<br>
                    750:                edns <em class="replaceable"><code>boolean</code></em>;<br>
                    751:                edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    752:                edns-version <em class="replaceable"><code>integer</code></em>;<br>
                    753:                keys <em class="replaceable"><code>server_key</code></em>;<br>
                    754:                max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
                    755:                notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
                    756:                    ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    757:                notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
                    758:                    | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    759:                padding <em class="replaceable"><code>integer</code></em>;<br>
                    760:                provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    761:                query-source ( ( [ address ] ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port<br>
                    762:                    ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
                    763:                    <em class="replaceable"><code>ipv4_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
                    764:                    dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    765:                query-source-v6 ( ( [ address ] ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<br>
                    766:                    port ( <em class="replaceable"><code>integer</code></em> | * ) ] ) | ( [ [ address ] (<br>
                    767:                    <em class="replaceable"><code>ipv6_address</code></em> | * ) ] port ( <em class="replaceable"><code>integer</code></em> | * ) ) ) [<br>
                    768:                    dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    769:                request-expire <em class="replaceable"><code>boolean</code></em>;<br>
                    770:                request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    771:                request-nsid <em class="replaceable"><code>boolean</code></em>;<br>
                    772:                send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
                    773:                tcp-keepalive <em class="replaceable"><code>boolean</code></em>;<br>
                    774:                tcp-only <em class="replaceable"><code>boolean</code></em>;<br>
                    775:                transfer-format ( many-answers | one-answer );<br>
                    776:                transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
                    777:                    * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    778:                transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
                    779:                    <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    780:                transfers <em class="replaceable"><code>integer</code></em>;<br>
                    781:        };<br>
                    782:        servfail-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    783:        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
                    784:        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
                    785:        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
                    786:        sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
                    787:        sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    788:        stale-answer-enable <em class="replaceable"><code>boolean</code></em>;<br>
                    789:        stale-answer-ttl <em class="replaceable"><code>ttlval</code></em>;<br>
                    790:        synth-from-dnssec <em class="replaceable"><code>boolean</code></em>;<br>
                    791:        transfer-format ( many-answers | one-answer );<br>
                    792:        transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    793:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    794:        transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
                    795:            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    796:        trust-anchor-telemetry <em class="replaceable"><code>boolean</code></em>; // experimental<br>
                    797:        trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
                    798:            <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>;<br>
                    799:            ... };<br>
                    800:        try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
                    801:        update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
                    802:        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                    803:        v6-bias <em class="replaceable"><code>integer</code></em>;<br>
                    804:        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                    805:        zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
                    806:        zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
                    807:                allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    808:                allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    809:                allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    810:                allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    811:                allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    812:                allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    813:                also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
                    814:                    <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] |<br>
                    815:                    <em class="replaceable"><code>ipv6_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ];<br>
                    816:                    ... };<br>
                    817:                alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port (<br>
                    818:                    <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    819:                alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
                    820:                    <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    821:                auto-dnssec ( allow | maintain | off );<br>
                    822:                check-dup-records ( fail | warn | ignore );<br>
                    823:                check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
                    824:                check-mx ( fail | warn | ignore );<br>
                    825:                check-mx-cname ( fail | warn | ignore );<br>
                    826:                check-names ( fail | warn | ignore );<br>
                    827:                check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
                    828:                check-spf ( warn | ignore );<br>
                    829:                check-srv-cname ( fail | warn | ignore );<br>
                    830:                check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
                    831:                database <em class="replaceable"><code>string</code></em>;<br>
                    832:                delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
                    833:                dialup ( notify | notify-passive | passive | refresh |<br>
                    834:                    <em class="replaceable"><code>boolean</code></em> );<br>
                    835:                dlz <em class="replaceable"><code>string</code></em>;<br>
                    836:                dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
                    837:                dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
                    838:                dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
                    839:                dnssec-update-mode ( maintain | no-resign );<br>
                    840:                file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    841:                forward ( first | only );<br>
                    842:                forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { (<br>
                    843:                    <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [<br>
                    844:                    dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    845:                in-view <em class="replaceable"><code>string</code></em>;<br>
                    846:                inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
                    847:                ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
                    848:                journal <em class="replaceable"><code>quoted_string</code></em>;<br>
                    849:                key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    850:                masterfile-format ( map | raw | text );<br>
                    851:                masterfile-style ( full | relative );<br>
                    852:                masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em><br>
                    853:                    | <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [<br>
                    854:                    port <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                    855:                max-ixfr-log-size ( default | unlimited |<br>
                    856:                max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    857:                max-records <em class="replaceable"><code>integer</code></em>;<br>
                    858:                max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    859:                max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    860:                max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
                    861:                max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
                    862:                max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
                    863:                max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
                    864:                max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
                    865:                min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    866:                min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    867:                multi-master <em class="replaceable"><code>boolean</code></em>;<br>
                    868:                notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
                    869:                notify-delay <em class="replaceable"><code>integer</code></em>;<br>
                    870:                notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | *<br>
                    871:                    ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    872:                notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em><br>
                    873:                    | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    874:                notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
                    875:                pubkey <em class="replaceable"><code>integer</code></em><br>
                    876:                    <em class="replaceable"><code>integer</code></em><br>
                    877:                    <em class="replaceable"><code>integer</code></em><br>
                    878:                request-expire <em class="replaceable"><code>boolean</code></em>;<br>
                    879:                request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    880:                serial-update-method ( date | increment | unixtime );<br>
                    881:                server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<br>
                    882:                    port <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    883:                server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
                    884:                sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
                    885:                sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
                    886:                sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
                    887:                sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
                    888:                transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
                    889:                    * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    890:                transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port (<br>
                    891:                    <em class="replaceable"><code>integer</code></em> | * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    892:                try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
                    893:                type ( delegation-only | forward | hint | master | redirect<br>
                    894:                    | slave | static-stub | stub );<br>
                    895:                update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
                    896:                update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> (<br>
                    897:                    6to4-self | external | krb5-self | krb5-subdomain |<br>
                    898:                    ms-self | ms-subdomain | name | self | selfsub |<br>
                    899:                    selfwild | subdomain | tcp-self | wildcard | zonesub )<br>
                    900:                    [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
                    901:                use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                    902:                zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                    903:                zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
                    904:        };<br>
                    905:        zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
                    906: };<br>
                    907: </p></div>
                    908:   </div>
                    909:
                    910:   <div class="refsection">
                    911: <a name="id-1.13.27.21"></a><h2>ZONE</h2>
                    912:
                    913:     <div class="literallayout"><p><br>
                    914: zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
                    915:        allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    916:        allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    917:        allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    918:        allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    919:        allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    920:        allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
                    921:        also-notify [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
                    922:            <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
                    923:            <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                    924:        alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
                    925:            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    926:        alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
                    927:            * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    928:        auto-dnssec ( allow | maintain | off );<br>
                    929:        check-dup-records ( fail | warn | ignore );<br>
                    930:        check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
                    931:        check-mx ( fail | warn | ignore );<br>
                    932:        check-mx-cname ( fail | warn | ignore );<br>
                    933:        check-names ( fail | warn | ignore );<br>
                    934:        check-sibling <em class="replaceable"><code>boolean</code></em>;<br>
                    935:        check-spf ( warn | ignore );<br>
                    936:        check-srv-cname ( fail | warn | ignore );<br>
                    937:        check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
                    938:        database <em class="replaceable"><code>string</code></em>;<br>
                    939:        delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
                    940:        dialup ( notify | notify-passive | passive | refresh | <em class="replaceable"><code>boolean</code></em> );<br>
                    941:        dlz <em class="replaceable"><code>string</code></em>;<br>
                    942:        dnssec-dnskey-kskonly <em class="replaceable"><code>boolean</code></em>;<br>
                    943:        dnssec-loadkeys-interval <em class="replaceable"><code>integer</code></em>;<br>
                    944:        dnssec-secure-to-insecure <em class="replaceable"><code>boolean</code></em>;<br>
                    945:        dnssec-update-mode ( maintain | no-resign );<br>
                    946:        file <em class="replaceable"><code>quoted_string</code></em>;<br>
                    947:        forward ( first | only );<br>
                    948:        forwarders [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>ipv4_address</code></em><br>
                    949:            | <em class="replaceable"><code>ipv6_address</code></em> ) [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    950:        in-view <em class="replaceable"><code>string</code></em>;<br>
                    951:        inline-signing <em class="replaceable"><code>boolean</code></em>;<br>
                    952:        ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
                    953:        journal <em class="replaceable"><code>quoted_string</code></em>;<br>
                    954:        key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
                    955:        masterfile-format ( map | raw | text );<br>
                    956:        masterfile-style ( full | relative );<br>
                    957:        masters [ port <em class="replaceable"><code>integer</code></em> ] [ dscp <em class="replaceable"><code>integer</code></em> ] { ( <em class="replaceable"><code>masters</code></em> |<br>
                    958:            <em class="replaceable"><code>ipv4_address</code></em> [ port <em class="replaceable"><code>integer</code></em> ] | <em class="replaceable"><code>ipv6_address</code></em> [ port<br>
                    959:            <em class="replaceable"><code>integer</code></em> ] ) [ key <em class="replaceable"><code>string</code></em> ]; ... };<br>
                    960:        max-journal-size ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
                    961:        max-records <em class="replaceable"><code>integer</code></em>;<br>
                    962:        max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    963:        max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    964:        max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
                    965:        max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
                    966:        max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
                    967:        max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
                    968:        max-zone-ttl ( unlimited | <em class="replaceable"><code>ttlval</code></em> );<br>
                    969:        min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
                    970:        min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
                    971:        multi-master <em class="replaceable"><code>boolean</code></em>;<br>
                    972:        notify ( explicit | master-only | <em class="replaceable"><code>boolean</code></em> );<br>
                    973:        notify-delay <em class="replaceable"><code>integer</code></em>;<br>
                    974:        notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    975:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    976:        notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ]<br>
                    977:            [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    978:        notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
                    979:        pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
                    980:        request-expire <em class="replaceable"><code>boolean</code></em>;<br>
                    981:        request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
                    982:        serial-update-method ( date | increment | unixtime );<br>
                    983:        server-addresses { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [ port<br>
                    984:            <em class="replaceable"><code>integer</code></em> ]; ... };<br>
                    985:        server-names { <em class="replaceable"><code>quoted_string</code></em>; ... };<br>
                    986:        sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
                    987:        sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
                    988:        sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
                    989:        sig-validity-interval <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];<br>
                    990:        transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * ) ] [<br>
                    991:            dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    992:        transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> | * )<br>
                    993:            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
                    994:        try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
                    995:        type ( delegation-only | forward | hint | master | redirect | slave<br>
                    996:            | static-stub | stub );<br>
                    997:        update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
                    998:        update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self |<br>
                    999:            external | krb5-self | krb5-subdomain | ms-self | ms-subdomain<br>
                   1000:            | name | self | selfsub | selfwild | subdomain | tcp-self |<br>
                   1001:            wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
                   1002:        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                   1003:        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                   1004:        zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
                   1005: };<br>
                   1006: </p></div>
                   1007:   </div>
                   1008:
                   1009:   <div class="refsection">
                   1010: <a name="id-1.13.27.22"></a><h2>FILES</h2>
                   1011:
                   1012:     <p><code class="filename">/etc/named.conf</code>
                   1013:     </p>
                   1014:   </div>
                   1015:
                   1016:   <div class="refsection">
                   1017: <a name="id-1.13.27.23"></a><h2>SEE ALSO</h2>
                   1018:
                   1019:     <p><span class="citerefentry">
                   1020:        <span class="refentrytitle">ddns-confgen</span>(8)
                   1021:       </span>,
                   1022:       <span class="citerefentry">
                   1023:        <span class="refentrytitle">named</span>(8)
                   1024:       </span>,
                   1025:       <span class="citerefentry">
                   1026:        <span class="refentrytitle">named-checkconf</span>(8)
                   1027:       </span>,
                   1028:       <span class="citerefentry">
                   1029:        <span class="refentrytitle">rndc</span>(8)
                   1030:       </span>,
                   1031:       <span class="citerefentry">
                   1032:        <span class="refentrytitle">rndc-confgen</span>(8)
                   1033:       </span>,
                   1034:       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
                   1035:     </p>
                   1036:   </div>
                   1037:
                   1038: </div>
                   1039: <div class="navfooter">
                   1040: <hr>
                   1041: <table width="100%" summary="Navigation footer">
                   1042: <tr>
                   1043: <td width="40%" align="left">
                   1044: <a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
                   1045: <td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch12.html">Up</a></td>
                   1046: <td width="40%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
                   1047: </td>
                   1048: </tr>
                   1049: <tr>
                   1050: <td width="40%" align="left" valign="top">
                   1051: <span class="application">named-rrchecker</span> </td>
                   1052: <td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
                   1053: <td width="40%" align="right" valign="top"> <span class="application">named</span>
                   1054: </td>
                   1055: </tr>
                   1056: </table>
                   1057: </div>
                   1058: <p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2-P1</p>
                   1059: </body>
                   1060: </html>

CVSweb <webmaster@jp.NetBSD.org>