+1701. [doc] A minimal named.conf man page.
+
1700. [func] nslookup is no longer to be treated as deprecated.
Remove "deprecated" warning message. Add man page.
--- /dev/null
+.\"
+.\" Copyright (C) 2004 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2000, 2001 Internet Software Consortium.
+.\"
+.\" Permission to use, copy, modify, and distribute this software for any
+.\" purpose with or without fee is hereby granted, provided that the above
+.\" copyright notice and this permission notice appear in all copies.
+.\"
+.\" THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+.\" REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+.\" AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+.\" INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+.\" LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+.\" PERFORMANCE OF THIS SOFTWARE.
+.\"
+.TH "NAMED.CONF" "5" "Aug 13, 2004" "BIND9" ""
+.SH NAME
+named.conf \- configuration file for named
+.SH SYNOPSIS
+.sp
+\fBnamed.conf\fR
+.SH "DESCRIPTION"
+.PP
+\fInamed.conf\fR is the configuration file for
+\fBnamed\fR. Statements are enclosed
+in braces and terminated with a semi-colon. Clauses in
+the statements are also semi-colon terminated. The usual
+comment styles are supported:
+.PP
+C style: /* */
+.PP
+C++ style: // to end of line
+.PP
+Unix style: # to end of line
+.SH "ACL"
+.sp
+.nf
+acl \fIstring\fR { \fIaddress_match_element\fR; ... };
+.sp
+.fi
+.SH "KEY"
+.sp
+.nf
+key \fIdomain_name\fR {
+ algorithm \fIstring\fR;
+ secret \fIstring\fR;
+};
+.sp
+.fi
+.SH "MASTERS"
+.sp
+.nf
+masters \fIstring\fR [ port \fIinteger\fR ] {
+ ( \fImasters\fR | \fIipv4_address\fR [port \fIinteger\fR] |
+ \fIipv6_address\fR [port \fIinteger\fR] ) [ key \fIstring\fR ]; ...
+};
+.sp
+.fi
+.SH "SERVER"
+.sp
+.nf
+server ( \fIipv4_address\fR | \fIipv6_address\fR ) {
+ bogus \fIboolean\fR;
+ edns \fIboolean\fR;
+ provide-ixfr \fIboolean\fR;
+ request-ixfr \fIboolean\fR;
+ keys \fIserver_key\fR;
+ transfers \fIinteger\fR;
+ transfer-format ( many-answers | one-answer );
+ transfer-source ( \fIipv4_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ transfer-source-v6 ( \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+
+ support-ixfr \fIboolean\fR; // obsolete
+};
+.sp
+.fi
+.SH "TRUSTED-KEYS"
+.sp
+.nf
+trusted-keys {
+ \fIdomain_name\fR \fIflags\fR \fIprotocol\fR \fIalgorithm\fR \fIkey\fR; ...
+};
+.sp
+.fi
+.SH "CONTROLS"
+.sp
+.nf
+controls {
+ inet ( \fIipv4_address\fR | \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ]
+ allow { \fIaddress_match_element\fR; ... }
+ [ keys { \fIstring\fR; ... } ];
+ unix \fIunsupported\fR; // not implemented
+};
+.sp
+.fi
+.SH "LOGGING"
+.sp
+.nf
+logging {
+ channel \fIstring\fR {
+ file \fIlog_file\fR;
+ syslog \fIoptional_facility\fR;
+ null;
+ stderr;
+ severity \fIlog_severity\fR;
+ print-time \fIboolean\fR;
+ print-severity \fIboolean\fR;
+ print-category \fIboolean\fR;
+ };
+ category \fIstring\fR { \fIstring\fR; ... };
+};
+.sp
+.fi
+.SH "LWRES"
+.sp
+.nf
+lwres {
+ listen-on [ port \fIinteger\fR ] {
+ ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; ...
+ };
+ view \fIstring\fR \fIoptional_class\fR;
+ search { \fIstring\fR; ... };
+ ndots \fIinteger\fR;
+};
+.sp
+.fi
+.SH "OPTIONS"
+.sp
+.nf
+options {
+ avoid-v4-udp-ports { \fIport\fR; ... };
+ avoid-v6-udp-ports { \fIport\fR; ... };
+ blackhole { \fIaddress_match_element\fR; ... };
+ coresize \fIsize\fR;
+ datasize \fIsize\fR;
+ directory \fIquoted_string\fR;
+ dump-file \fIquoted_string\fR;
+ files \fIsize\fR;
+ heartbeat-interval \fIinteger\fR;
+ host-statistics \fIboolean\fR; // not implemented
+ hostname ( \fIquoted_string\fR | none );
+ interface-interval \fIinteger\fR;
+ listen-on [ port \fIinteger\fR ] { \fIaddress_match_element\fR; ... };
+ listen-on-v6 [ port \fIinteger\fR ] { \fIaddress_match_element\fR; ... };
+ match-mapped-addresses \fIboolean\fR;
+ memstatistics-file \fIquoted_string\fR;
+ pid-file ( \fIquoted_string\fR | none );
+ port \fIinteger\fR;
+ querylog \fIboolean\fR;
+ recursing-file \fIquoted_string\fR;
+ random-device \fIquoted_string\fR;
+ recursive-clients \fIinteger\fR;
+ serial-query-rate \fIinteger\fR;
+ server-id ( \fIquoted_string\fR | none |;
+ stacksize \fIsize\fR;
+ statistics-file \fIquoted_string\fR;
+ statistics-interval \fIinteger\fR; // not yet implemented
+ tcp-clients \fIinteger\fR;
+ tcp-listen-queue \fIinteger\fR;
+ tkey-dhkey \fIquoted_string\fR \fIinteger\fR;
+ tkey-gssapi-credential \fIquoted_string\fR;
+ tkey-domain \fIquoted_string\fR;
+ transfers-per-ns \fIinteger\fR;
+ transfers-in \fIinteger\fR;
+ transfers-out \fIinteger\fR;
+ use-ixfr \fIboolean\fR;
+ version ( \fIquoted_string\fR | none );
+ allow-recursion { \fIaddress_match_element\fR; ... };
+ sortlist { \fIaddress_match_element\fR; ... };
+ topology { \fIaddress_match_element\fR; ... }; // not implemented
+ auth-nxdomain \fIboolean\fR; // default changed
+ minimal-responses \fIboolean\fR;
+ recursion \fIboolean\fR;
+ rrset-order {
+ [ class \fIstring\fR ] [ type \fIstring\fR ]
+ [ name \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; ...
+ };
+ provide-ixfr \fIboolean\fR;
+ request-ixfr \fIboolean\fR;
+ rfc2308-type1 \fIboolean\fR; // not yet implemented
+ additional-from-auth \fIboolean\fR;
+ additional-from-cache \fIboolean\fR;
+ query-source \fIquerysource4\fR;
+ query-source-v6 \fIquerysource6\fR;
+ cleaning-interval \fIinteger\fR;
+ min-roots \fIinteger\fR; // not implemented
+ lame-ttl \fIinteger\fR;
+ max-ncache-ttl \fIinteger\fR;
+ max-cache-ttl \fIinteger\fR;
+ transfer-format ( many-answers | one-answer );
+ max-cache-size \fIsize_no_default\fR;
+ check-names ( master | slave | response )
+ ( fail | warn | ignore );
+ cache-file \fIquoted_string\fR;
+ suppress-initial-notify \fIboolean\fR; // not yet implemented
+ preferred-glue \fIstring\fR;
+ dual-stack-servers [ port \fIinteger\fR ] {
+ ( \fIquoted_string\fR [port \fIinteger\fR] |
+ \fIipv4_address\fR [port \fIinteger\fR] |
+ \fIipv6_address\fR [port \fIinteger\fR] ); ...
+ }
+ edns-udp-size \fIinteger\fR;
+ root-delegation-only [ exclude { \fIquoted_string\fR; ... } ];
+ disable-algorithms \fIstring\fR { \fIstring\fR; ... };
+ dnssec-enable \fIboolean\fR;
+ dnssec-lookaside \fIstring\fR trust-anchor \fIstring\fR;
+ dnssec-must-be-secure \fIstring\fR \fIboolean\fR;
+
+ dialup \fIdialuptype\fR;
+ ixfr-from-differences \fIixfrdiff\fR;
+
+ allow-query { \fIaddress_match_element\fR; ... };
+ allow-transfer { \fIaddress_match_element\fR; ... };
+ allow-update-forwarding { \fIaddress_match_element\fR; ... };
+
+ notify \fInotifytype\fR;
+ notify-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
+ notify-source-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
+ also-notify [ port \fIinteger\fR ] { ( \fIipv4_address\fR | \fIipv6_address\fR )
+ [ port \fIinteger\fR ]; ... };
+ allow-notify { \fIaddress_match_element\fR; ... };
+
+ forward ( first | only );
+ forwarders [ port \fIinteger\fR ] {
+ ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; ...
+ };
+
+ max-journal-size \fIsize_no_default\fR;
+ max-transfer-time-in \fIinteger\fR;
+ max-transfer-time-out \fIinteger\fR;
+ max-transfer-idle-in \fIinteger\fR;
+ max-transfer-idle-out \fIinteger\fR;
+ max-retry-time \fIinteger\fR;
+ min-retry-time \fIinteger\fR;
+ max-refresh-time \fIinteger\fR;
+ min-refresh-time \fIinteger\fR;
+ multi-master \fIboolean\fR;
+ sig-validity-interval \fIinteger\fR;
+
+ transfer-source ( \fIipv4_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ transfer-source-v6 ( \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+
+ alt-transfer-source ( \fIipv4_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ alt-transfer-source-v6 ( \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ use-alt-transfer-source \fIboolean\fR;
+
+ zone-statistics \fIboolean\fR;
+ key-directory \fIquoted_string\fR;
+
+ allow-v6-synthesis { \fIaddress_match_element\fR; ... }; // obsolete
+ deallocate-on-exit \fIboolean\fR; // obsolete
+ fake-iquery \fIboolean\fR; // obsolete
+ fetch-glue \fIboolean\fR; // obsolete
+ has-old-clients \fIboolean\fR; // obsolete
+ maintain-ixfr-base \fIboolean\fR; // obsolete
+ max-ixfr-log-size \fIsize\fR; // obsolete
+ multiple-cnames \fIboolean\fR; // obsolete
+ named-xfer \fIquoted_string\fR; // obsolete
+ serial-queries \fIinteger\fR; // obsolete
+ treat-cr-as-space \fIboolean\fR; // obsolete
+ use-id-pool \fIboolean\fR; // obsolete
+};
+.sp
+.fi
+.SH "VIEW"
+.sp
+.nf
+view \fIstring\fR \fIoptional_class\fR {
+ match-clients { \fIaddress_match_element\fR; ... };
+ match-destinations { \fIaddress_match_element\fR; ... };
+ match-recursive-only \fIboolean\fR;
+
+ key \fIstring\fR {
+ algorithm \fIstring\fR;
+ secret \fIstring\fR;
+ };
+
+ zone \fIstring\fR \fIoptional_class\fR {
+ ...
+ };
+
+ server ( \fIipv4_address\fR | \fIipv6_address\fR ) {
+ ...
+ };
+
+ trusted-keys {
+ \fIstring\fR \fIinteger\fR \fIinteger\fR \fIinteger\fR \fIquoted_string\fR; ...
+ };
+
+ allow-recursion { \fIaddress_match_element\fR; ... };
+ sortlist { \fIaddress_match_element\fR; ... };
+ topology { \fIaddress_match_element\fR; ... }; // not implemented
+ auth-nxdomain \fIboolean\fR; // default changed
+ minimal-responses \fIboolean\fR;
+ recursion \fIboolean\fR;
+ rrset-order {
+ [ class \fIstring\fR ] [ type \fIstring\fR ]
+ [ name \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; ...
+ };
+ provide-ixfr \fIboolean\fR;
+ request-ixfr \fIboolean\fR;
+ rfc2308-type1 \fIboolean\fR; // not yet implemented
+ additional-from-auth \fIboolean\fR;
+ additional-from-cache \fIboolean\fR;
+ query-source \fIquerysource4\fR;
+ query-source-v6 \fIquerysource6\fR;
+ cleaning-interval \fIinteger\fR;
+ min-roots \fIinteger\fR; // not implemented
+ lame-ttl \fIinteger\fR;
+ max-ncache-ttl \fIinteger\fR;
+ max-cache-ttl \fIinteger\fR;
+ transfer-format ( many-answers | one-answer );
+ max-cache-size \fIsize_no_default\fR;
+ check-names ( master | slave | response )
+ ( fail | warn | ignore );
+ cache-file \fIquoted_string\fR;
+ suppress-initial-notify \fIboolean\fR; // not yet implemented
+ preferred-glue \fIstring\fR;
+ dual-stack-servers [ port \fIinteger\fR ] {
+ ( \fIquoted_string\fR [port \fIinteger\fR] |
+ \fIipv4_address\fR [port \fIinteger\fR] |
+ \fIipv6_address\fR [port \fIinteger\fR] ); ...
+ };
+ edns-udp-size \fIinteger\fR;
+ root-delegation-only [ exclude { \fIquoted_string\fR; ... } ];
+ disable-algorithms \fIstring\fR { \fIstring\fR; ... };
+ dnssec-enable \fIboolean\fR;
+ dnssec-lookaside \fIstring\fR trust-anchor \fIstring\fR;
+
+ dnssec-must-be-secure \fIstring\fR \fIboolean\fR;
+ dialup \fIdialuptype\fR;
+ ixfr-from-differences \fIixfrdiff\fR;
+
+ allow-query { \fIaddress_match_element\fR; ... };
+ allow-transfer { \fIaddress_match_element\fR; ... };
+ allow-update-forwarding { \fIaddress_match_element\fR; ... };
+
+ notify \fInotifytype\fR;
+ notify-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
+ notify-source-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
+ also-notify [ port \fIinteger\fR ] { ( \fIipv4_address\fR | \fIipv6_address\fR )
+ [ port \fIinteger\fR ]; ... };
+ allow-notify { \fIaddress_match_element\fR; ... };
+
+ forward ( first | only );
+ forwarders [ port \fIinteger\fR ] {
+ ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; ...
+ };
+
+ max-journal-size \fIsize_no_default\fR;
+ max-transfer-time-in \fIinteger\fR;
+ max-transfer-time-out \fIinteger\fR;
+ max-transfer-idle-in \fIinteger\fR;
+ max-transfer-idle-out \fIinteger\fR;
+ max-retry-time \fIinteger\fR;
+ min-retry-time \fIinteger\fR;
+ max-refresh-time \fIinteger\fR;
+ min-refresh-time \fIinteger\fR;
+ multi-master \fIboolean\fR;
+ sig-validity-interval \fIinteger\fR;
+
+ transfer-source ( \fIipv4_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ transfer-source-v6 ( \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+
+ alt-transfer-source ( \fIipv4_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ alt-transfer-source-v6 ( \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ use-alt-transfer-source \fIboolean\fR;
+
+ zone-statistics \fIboolean\fR;
+ key-directory \fIquoted_string\fR;
+
+ allow-v6-synthesis { \fIaddress_match_element\fR; ... }; // obsolete
+ fetch-glue \fIboolean\fR; // obsolete
+ maintain-ixfr-base \fIboolean\fR; // obsolete
+ max-ixfr-log-size \fIsize\fR; // obsolete
+};
+.sp
+.fi
+.SH "ZONE"
+.sp
+.nf
+zone \fIstring\fR \fIoptional_class\fR {
+ type ( master | slave | stub | hint |
+ forward | delegation-only );
+ file \fIquoted_string\fR;
+
+ masters [ port \fIinteger\fR ] {
+ ( \fImasters\fR |
+ \fIipv4_address\fR [port \fIinteger\fR] |
+ \fIipv6_address\fR [ port \fIinteger\fR ] ) [ key \fIstring\fR ]; ...
+ };
+
+ database \fIstring\fR;
+ delegation-only \fIboolean\fR;
+ check-names ( fail | warn | ignore );
+ dialup \fIdialuptype\fR;
+ ixfr-from-differences \fIboolean\fR;
+
+ allow-query { \fIaddress_match_element\fR; ... };
+ allow-transfer { \fIaddress_match_element\fR; ... };
+ allow-update { \fIaddress_match_element\fR; ... };
+ allow-update-forwarding { \fIaddress_match_element\fR; ... };
+ update-policy {
+ ( grant | deny ) \fIstring\fR
+ ( name | subdomain | wildcard | self ) \fIstring\fR
+ \fIrrtypelist\fR; ...
+ };
+
+ notify \fInotifytype\fR;
+ notify-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
+ notify-source-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ];
+ also-notify [ port \fIinteger\fR ] { ( \fIipv4_address\fR | \fIipv6_address\fR )
+ [ port \fIinteger\fR ]; ... };
+ allow-notify { \fIaddress_match_element\fR; ... };
+
+ forward ( first | only );
+ forwarders [ port \fIinteger\fR ] {
+ ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ]; ...
+ };
+
+ max-journal-size \fIsize_no_default\fR;
+ max-transfer-time-in \fIinteger\fR;
+ max-transfer-time-out \fIinteger\fR;
+ max-transfer-idle-in \fIinteger\fR;
+ max-transfer-idle-out \fIinteger\fR;
+ max-retry-time \fIinteger\fR;
+ min-retry-time \fIinteger\fR;
+ max-refresh-time \fIinteger\fR;
+ min-refresh-time \fIinteger\fR;
+ multi-master \fIboolean\fR;
+ sig-validity-interval \fIinteger\fR;
+
+ transfer-source ( \fIipv4_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ transfer-source-v6 ( \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+
+ alt-transfer-source ( \fIipv4_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ alt-transfer-source-v6 ( \fIipv6_address\fR | * )
+ [ port ( \fIinteger\fR | * ) ];
+ use-alt-transfer-source \fIboolean\fR;
+
+ zone-statistics \fIboolean\fR;
+ key-directory \fIquoted_string\fR;
+
+ ixfr-base \fIquoted_string\fR; // obsolete
+ ixfr-tmp-file \fIquoted_string\fR; // obsolete
+ maintain-ixfr-base \fIboolean\fR; // obsolete
+ max-ixfr-log-size \fIsize\fR; // obsolete
+ pubkey \fIinteger\fR \fIinteger\fR \fIinteger\fR \fIquoted_string\fR; // obsolete
+};
+.sp
+.fi
+.SH "FILES"
+.PP
+\fI/etc/named.conf\fR
+.SH "SEE ALSO"
+.PP
+\fBnamed\fR(8),
+\fBrndc\fR(8),
+\fBBIND 9 Adminstrators Reference Manual\fR.
--- /dev/null
+<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN">
+<!--
+ - Copyright (C) 2004 Internet Systems Consortium, Inc. ("ISC")
+ -
+ - Permission to use, copy, modify, and distribute this software for any
+ - purpose with or without fee is hereby granted, provided that the above
+ - copyright notice and this permission notice appear in all copies.
+ -
+ - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ - PERFORMANCE OF THIS SOFTWARE.
+-->
+
+<!-- $Id: named.conf.docbook,v 1.1 2004/08/20 21:33:14 marka Exp $ -->
+
+<refentry>
+ <refentryinfo>
+ <date>Aug 13, 2004</date>
+ </refentryinfo>
+
+ <refmeta>
+ <refentrytitle><filename>named.conf</filename></refentrytitle>
+ <manvolnum>5</manvolnum>
+ <refmiscinfo>BIND9</refmiscinfo>
+ </refmeta>
+
+ <refnamediv>
+ <refname><filename>named.conf</filename></refname>
+ <refpurpose>configuration file for named</refpurpose>
+ </refnamediv>
+
+ <refsynopsisdiv>
+ <cmdsynopsis>
+ <command>named.conf</command>
+ </cmdsynopsis>
+ </refsynopsisdiv>
+
+ <refsect1>
+ <title>DESCRIPTION</title>
+ <para>
+ <filename>named.conf</filename> is the configuration file for
+ <command>named</command>. Statements are enclosed
+ in braces and terminated with a semi-colon. Clauses in
+ the statements are also semi-colon terminated. The usual
+ comment styles are supported:
+ </para>
+ <para>
+ C style: /* */
+ </para>
+ <para>
+ C++ style: // to end of line
+ </para>
+ <para>
+ Unix style: # to end of line
+ </para>
+ </refsect1>
+
+<refsect1>
+<title>ACL</title>
+<LITERALLAYOUT>
+acl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
+
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>KEY</title>
+<LITERALLAYOUT>
+key <replaceable>domain_name</replaceable> {
+ algorithm <replaceable>string</replaceable>;
+ secret <replaceable>string</replaceable>;
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>MASTERS</title>
+<LITERALLAYOUT>
+masters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
+ <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>SERVER</title>
+<LITERALLAYOUT>
+server ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) {
+ bogus <replaceable>boolean</replaceable>;
+ edns <replaceable>boolean</replaceable>;
+ provide-ixfr <replaceable>boolean</replaceable>;
+ request-ixfr <replaceable>boolean</replaceable>;
+ keys <replaceable>server_key</replaceable>;
+ transfers <replaceable>integer</replaceable>;
+ transfer-format ( many-answers | one-answer );
+ transfer-source ( <replaceable>ipv4_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+
+ support-ixfr <replaceable>boolean</replaceable>; // obsolete
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>TRUSTED-KEYS</title>
+<LITERALLAYOUT>
+trusted-keys {
+ <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>CONTROLS</title>
+<LITERALLAYOUT>
+controls {
+ inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
+ allow { <replaceable>address_match_element</replaceable>; ... }
+ <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
+ unix <replaceable>unsupported</replaceable>; // not implemented
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>LOGGING</title>
+<LITERALLAYOUT>
+logging {
+ channel <replaceable>string</replaceable> {
+ file <replaceable>log_file</replaceable>;
+ syslog <replaceable>optional_facility</replaceable>;
+ null;
+ stderr;
+ severity <replaceable>log_severity</replaceable>;
+ print-time <replaceable>boolean</replaceable>;
+ print-severity <replaceable>boolean</replaceable>;
+ print-category <replaceable>boolean</replaceable>;
+ };
+ category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>LWRES</title>
+<LITERALLAYOUT>
+lwres {
+ listen-on <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
+ };
+ view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
+ search { <replaceable>string</replaceable>; ... };
+ ndots <replaceable>integer</replaceable>;
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>OPTIONS</title>
+<LITERALLAYOUT>
+options {
+ avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
+ avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
+ blackhole { <replaceable>address_match_element</replaceable>; ... };
+ coresize <replaceable>size</replaceable>;
+ datasize <replaceable>size</replaceable>;
+ directory <replaceable>quoted_string</replaceable>;
+ dump-file <replaceable>quoted_string</replaceable>;
+ files <replaceable>size</replaceable>;
+ heartbeat-interval <replaceable>integer</replaceable>;
+ host-statistics <replaceable>boolean</replaceable>; // not implemented
+ hostname ( <replaceable>quoted_string</replaceable> | none );
+ interface-interval <replaceable>integer</replaceable>;
+ listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
+ listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
+ match-mapped-addresses <replaceable>boolean</replaceable>;
+ memstatistics-file <replaceable>quoted_string</replaceable>;
+ pid-file ( <replaceable>quoted_string</replaceable> | none );
+ port <replaceable>integer</replaceable>;
+ querylog <replaceable>boolean</replaceable>;
+ recursing-file <replaceable>quoted_string</replaceable>;
+ random-device <replaceable>quoted_string</replaceable>;
+ recursive-clients <replaceable>integer</replaceable>;
+ serial-query-rate <replaceable>integer</replaceable>;
+ server-id ( <replaceable>quoted_string</replaceable> | none |;
+ stacksize <replaceable>size</replaceable>;
+ statistics-file <replaceable>quoted_string</replaceable>;
+ statistics-interval <replaceable>integer</replaceable>; // not yet implemented
+ tcp-clients <replaceable>integer</replaceable>;
+ tcp-listen-queue <replaceable>integer</replaceable>;
+ tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
+ tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
+ tkey-domain <replaceable>quoted_string</replaceable>;
+ transfers-per-ns <replaceable>integer</replaceable>;
+ transfers-in <replaceable>integer</replaceable>;
+ transfers-out <replaceable>integer</replaceable>;
+ use-ixfr <replaceable>boolean</replaceable>;
+ version ( <replaceable>quoted_string</replaceable> | none );
+ allow-recursion { <replaceable>address_match_element</replaceable>; ... };
+ sortlist { <replaceable>address_match_element</replaceable>; ... };
+ topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
+ auth-nxdomain <replaceable>boolean</replaceable>; // default changed
+ minimal-responses <replaceable>boolean</replaceable>;
+ recursion <replaceable>boolean</replaceable>;
+ rrset-order {
+ <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
+ <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
+ };
+ provide-ixfr <replaceable>boolean</replaceable>;
+ request-ixfr <replaceable>boolean</replaceable>;
+ rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
+ additional-from-auth <replaceable>boolean</replaceable>;
+ additional-from-cache <replaceable>boolean</replaceable>;
+ query-source <replaceable>querysource4</replaceable>;
+ query-source-v6 <replaceable>querysource6</replaceable>;
+ cleaning-interval <replaceable>integer</replaceable>;
+ min-roots <replaceable>integer</replaceable>; // not implemented
+ lame-ttl <replaceable>integer</replaceable>;
+ max-ncache-ttl <replaceable>integer</replaceable>;
+ max-cache-ttl <replaceable>integer</replaceable>;
+ transfer-format ( many-answers | one-answer );
+ max-cache-size <replaceable>size_no_default</replaceable>;
+ check-names ( master | slave | response )
+ ( fail | warn | ignore );
+ cache-file <replaceable>quoted_string</replaceable>;
+ suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
+ preferred-glue <replaceable>string</replaceable>;
+ dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
+ <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
+ <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
+ }
+ edns-udp-size <replaceable>integer</replaceable>;
+ root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
+ disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
+ dnssec-enable <replaceable>boolean</replaceable>;
+ dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
+ dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
+
+ dialup <replaceable>dialuptype</replaceable>;
+ ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
+
+ allow-query { <replaceable>address_match_element</replaceable>; ... };
+ allow-transfer { <replaceable>address_match_element</replaceable>; ... };
+ allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
+
+ notify <replaceable>notifytype</replaceable>;
+ notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
+ <optional> port <replaceable>integer</replaceable> </optional>; ... };
+ allow-notify { <replaceable>address_match_element</replaceable>; ... };
+
+ forward ( first | only );
+ forwarders <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
+ };
+
+ max-journal-size <replaceable>size_no_default</replaceable>;
+ max-transfer-time-in <replaceable>integer</replaceable>;
+ max-transfer-time-out <replaceable>integer</replaceable>;
+ max-transfer-idle-in <replaceable>integer</replaceable>;
+ max-transfer-idle-out <replaceable>integer</replaceable>;
+ max-retry-time <replaceable>integer</replaceable>;
+ min-retry-time <replaceable>integer</replaceable>;
+ max-refresh-time <replaceable>integer</replaceable>;
+ min-refresh-time <replaceable>integer</replaceable>;
+ multi-master <replaceable>boolean</replaceable>;
+ sig-validity-interval <replaceable>integer</replaceable>;
+
+ transfer-source ( <replaceable>ipv4_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+
+ alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ use-alt-transfer-source <replaceable>boolean</replaceable>;
+
+ zone-statistics <replaceable>boolean</replaceable>;
+ key-directory <replaceable>quoted_string</replaceable>;
+
+ allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
+ deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
+ fake-iquery <replaceable>boolean</replaceable>; // obsolete
+ fetch-glue <replaceable>boolean</replaceable>; // obsolete
+ has-old-clients <replaceable>boolean</replaceable>; // obsolete
+ maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
+ max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
+ multiple-cnames <replaceable>boolean</replaceable>; // obsolete
+ named-xfer <replaceable>quoted_string</replaceable>; // obsolete
+ serial-queries <replaceable>integer</replaceable>; // obsolete
+ treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
+ use-id-pool <replaceable>boolean</replaceable>; // obsolete
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>VIEW</title>
+<LITERALLAYOUT>
+view <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
+ match-clients { <replaceable>address_match_element</replaceable>; ... };
+ match-destinations { <replaceable>address_match_element</replaceable>; ... };
+ match-recursive-only <replaceable>boolean</replaceable>;
+
+ key <replaceable>string</replaceable> {
+ algorithm <replaceable>string</replaceable>;
+ secret <replaceable>string</replaceable>;
+ };
+
+ zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
+ ...
+ };
+
+ server ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) {
+ ...
+ };
+
+ trusted-keys {
+ <replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; ...
+ };
+
+ allow-recursion { <replaceable>address_match_element</replaceable>; ... };
+ sortlist { <replaceable>address_match_element</replaceable>; ... };
+ topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
+ auth-nxdomain <replaceable>boolean</replaceable>; // default changed
+ minimal-responses <replaceable>boolean</replaceable>;
+ recursion <replaceable>boolean</replaceable>;
+ rrset-order {
+ <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
+ <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
+ };
+ provide-ixfr <replaceable>boolean</replaceable>;
+ request-ixfr <replaceable>boolean</replaceable>;
+ rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
+ additional-from-auth <replaceable>boolean</replaceable>;
+ additional-from-cache <replaceable>boolean</replaceable>;
+ query-source <replaceable>querysource4</replaceable>;
+ query-source-v6 <replaceable>querysource6</replaceable>;
+ cleaning-interval <replaceable>integer</replaceable>;
+ min-roots <replaceable>integer</replaceable>; // not implemented
+ lame-ttl <replaceable>integer</replaceable>;
+ max-ncache-ttl <replaceable>integer</replaceable>;
+ max-cache-ttl <replaceable>integer</replaceable>;
+ transfer-format ( many-answers | one-answer );
+ max-cache-size <replaceable>size_no_default</replaceable>;
+ check-names ( master | slave | response )
+ ( fail | warn | ignore );
+ cache-file <replaceable>quoted_string</replaceable>;
+ suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
+ preferred-glue <replaceable>string</replaceable>;
+ dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
+ <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
+ <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
+ };
+ edns-udp-size <replaceable>integer</replaceable>;
+ root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
+ disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
+ dnssec-enable <replaceable>boolean</replaceable>;
+ dnssec-lookaside <replaceable>string</replaceable> trust-anchor <replaceable>string</replaceable>;
+
+ dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
+ dialup <replaceable>dialuptype</replaceable>;
+ ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
+
+ allow-query { <replaceable>address_match_element</replaceable>; ... };
+ allow-transfer { <replaceable>address_match_element</replaceable>; ... };
+ allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
+
+ notify <replaceable>notifytype</replaceable>;
+ notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
+ <optional> port <replaceable>integer</replaceable> </optional>; ... };
+ allow-notify { <replaceable>address_match_element</replaceable>; ... };
+
+ forward ( first | only );
+ forwarders <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
+ };
+
+ max-journal-size <replaceable>size_no_default</replaceable>;
+ max-transfer-time-in <replaceable>integer</replaceable>;
+ max-transfer-time-out <replaceable>integer</replaceable>;
+ max-transfer-idle-in <replaceable>integer</replaceable>;
+ max-transfer-idle-out <replaceable>integer</replaceable>;
+ max-retry-time <replaceable>integer</replaceable>;
+ min-retry-time <replaceable>integer</replaceable>;
+ max-refresh-time <replaceable>integer</replaceable>;
+ min-refresh-time <replaceable>integer</replaceable>;
+ multi-master <replaceable>boolean</replaceable>;
+ sig-validity-interval <replaceable>integer</replaceable>;
+
+ transfer-source ( <replaceable>ipv4_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+
+ alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ use-alt-transfer-source <replaceable>boolean</replaceable>;
+
+ zone-statistics <replaceable>boolean</replaceable>;
+ key-directory <replaceable>quoted_string</replaceable>;
+
+ allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
+ fetch-glue <replaceable>boolean</replaceable>; // obsolete
+ maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
+ max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>ZONE</title>
+<LITERALLAYOUT>
+zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
+ type ( master | slave | stub | hint |
+ forward | delegation-only );
+ file <replaceable>quoted_string</replaceable>;
+
+ masters <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>masters</replaceable> |
+ <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
+ <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
+ };
+
+ database <replaceable>string</replaceable>;
+ delegation-only <replaceable>boolean</replaceable>;
+ check-names ( fail | warn | ignore );
+ dialup <replaceable>dialuptype</replaceable>;
+ ixfr-from-differences <replaceable>boolean</replaceable>;
+
+ allow-query { <replaceable>address_match_element</replaceable>; ... };
+ allow-transfer { <replaceable>address_match_element</replaceable>; ... };
+ allow-update { <replaceable>address_match_element</replaceable>; ... };
+ allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
+ update-policy {
+ ( grant | deny ) <replaceable>string</replaceable>
+ ( name | subdomain | wildcard | self ) <replaceable>string</replaceable>
+ <replaceable>rrtypelist</replaceable>; ...
+ };
+
+ notify <replaceable>notifytype</replaceable>;
+ notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
+ <optional> port <replaceable>integer</replaceable> </optional>; ... };
+ allow-notify { <replaceable>address_match_element</replaceable>; ... };
+
+ forward ( first | only );
+ forwarders <optional> port <replaceable>integer</replaceable> </optional> {
+ ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
+ };
+
+ max-journal-size <replaceable>size_no_default</replaceable>;
+ max-transfer-time-in <replaceable>integer</replaceable>;
+ max-transfer-time-out <replaceable>integer</replaceable>;
+ max-transfer-idle-in <replaceable>integer</replaceable>;
+ max-transfer-idle-out <replaceable>integer</replaceable>;
+ max-retry-time <replaceable>integer</replaceable>;
+ min-retry-time <replaceable>integer</replaceable>;
+ max-refresh-time <replaceable>integer</replaceable>;
+ min-refresh-time <replaceable>integer</replaceable>;
+ multi-master <replaceable>boolean</replaceable>;
+ sig-validity-interval <replaceable>integer</replaceable>;
+
+ transfer-source ( <replaceable>ipv4_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+
+ alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
+ <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
+ use-alt-transfer-source <replaceable>boolean</replaceable>;
+
+ zone-statistics <replaceable>boolean</replaceable>;
+ key-directory <replaceable>quoted_string</replaceable>;
+
+ ixfr-base <replaceable>quoted_string</replaceable>; // obsolete
+ ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete
+ maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
+ max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
+ pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete
+};
+</LITERALLAYOUT>
+</refsect1>
+
+<refsect1>
+<title>FILES</title>
+<para>
+<filename>/etc/named.conf</filename>
+</para>
+</refsect1>
+
+<refsect1>
+<title>SEE ALSO</title>
+<para>
+<citerefentry>
+<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
+</citerefentry>,
+<citerefentry>
+<refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>
+</citerefentry>,
+<citerefentry>
+<refentrytitle>BIND 9 Adminstrators Reference Manual</refentrytitle>
+</citerefentry>.
+</para>
+</refsect1>
+
+</refentry>
+<!--
+ - Local variables:
+ - mode: sgml
+ - End:
+-->
--- /dev/null
+<!--
+ - Copyright (C) 2004 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2000, 2001 Internet Software Consortium.
+ -
+ - Permission to use, copy, modify, and distribute this software for any
+ - purpose with or without fee is hereby granted, provided that the above
+ - copyright notice and this permission notice appear in all copies.
+ -
+ - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ - PERFORMANCE OF THIS SOFTWARE.
+-->
+<HTML
+><HEAD
+><TITLE
+>named.conf</TITLE
+><META
+NAME="GENERATOR"
+CONTENT="Modular DocBook HTML Stylesheet Version 1.73
+"></HEAD
+><BODY
+CLASS="REFENTRY"
+BGCOLOR="#FFFFFF"
+TEXT="#000000"
+LINK="#0000FF"
+VLINK="#840084"
+ALINK="#0000FF"
+><H1
+><A
+NAME="AEN1"
+><TT
+CLASS="FILENAME"
+>named.conf</TT
+></A
+></H1
+><DIV
+CLASS="REFNAMEDIV"
+><A
+NAME="AEN9"
+></A
+><H2
+>Name</H2
+><TT
+CLASS="FILENAME"
+>named.conf</TT
+> -- configuration file for named</DIV
+><DIV
+CLASS="REFSYNOPSISDIV"
+><A
+NAME="AEN13"
+></A
+><H2
+>Synopsis</H2
+><P
+><B
+CLASS="COMMAND"
+>named.conf</B
+> </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN16"
+></A
+><H2
+>DESCRIPTION</H2
+><P
+> <TT
+CLASS="FILENAME"
+>named.conf</TT
+> is the configuration file for
+ <B
+CLASS="COMMAND"
+>named</B
+>. Statements are enclosed
+ in braces and terminated with a semi-colon. Clauses in
+ the statements are also semi-colon terminated. The usual
+ comment styles are supported:
+ </P
+><P
+> C style: /* */
+ </P
+><P
+> C++ style: // to end of line
+ </P
+><P
+> Unix style: # to end of line
+ </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN24"
+></A
+><H2
+>OPTIONS</H2
+><P
+CLASS="LITERALLAYOUT"
+>options {<br>
+ avoid-v4-udp-ports { <TT
+CLASS="REPLACEABLE"
+><I
+>port</I
+></TT
+>; ... };<br>
+ avoid-v6-udp-ports { <TT
+CLASS="REPLACEABLE"
+><I
+>port</I
+></TT
+>; ... };<br>
+ blackhole { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ coresize <TT
+CLASS="REPLACEABLE"
+><I
+>size</I
+></TT
+>;<br>
+ datasize <TT
+CLASS="REPLACEABLE"
+><I
+>size</I
+></TT
+>;<br>
+ deallocate-on-exit <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ directory <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ dump-file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ fake-iquery <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ files <TT
+CLASS="REPLACEABLE"
+><I
+>size</I
+></TT
+>;<br>
+ has-old-clients <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ heartbeat-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ host-statistics <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // not implemented<br>
+ hostname ( <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> | none );<br>
+ interface-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ listen-on [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ listen-on-v6 [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ match-mapped-addresses <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ memstatistics-file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ multiple-cnames <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ named-xfer <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>; // obsolete<br>
+ pid-file ( <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> | none );<br>
+ port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ querylog <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ recursing-file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ random-device <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ recursive-clients <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ serial-queries <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>; // obsolete<br>
+ serial-query-rate <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ server-id ( <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> | none |;<br>
+ stacksize <TT
+CLASS="REPLACEABLE"
+><I
+>size</I
+></TT
+>;<br>
+ statistics-file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ statistics-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>; // not yet implemented<br>
+ tcp-clients <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ tcp-listen-queue <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ tkey-dhkey <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ tkey-gssapi-credential <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ tkey-domain <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ transfers-per-ns <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ transfers-in <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ transfers-out <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ treat-cr-as-space <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ use-id-pool <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ use-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ version ( <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> | none );<br>
+ allow-recursion { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-v6-synthesis { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... }; // obsolete<br>
+ sortlist { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ topology { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... }; // not implemented<br>
+ auth-nxdomain <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // default changed<br>
+ minimal-responses <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ recursion <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ rrset-order {<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> class <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> </SPAN
+>] [<SPAN
+CLASS="OPTIONAL"
+> type <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> </SPAN
+>]<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> name <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> </SPAN
+>] <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>; ...<br>
+ };<br>
+ provide-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ request-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ fetch-glue <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ rfc2308-type1 <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // not yet implemented<br>
+ additional-from-auth <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ additional-from-cache <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ query-source <TT
+CLASS="REPLACEABLE"
+><I
+>querysource4</I
+></TT
+>;<br>
+ query-source-v6 <TT
+CLASS="REPLACEABLE"
+><I
+>querysource6</I
+></TT
+>;<br>
+ cleaning-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-roots <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>; // not implemented<br>
+ lame-ttl <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-ncache-ttl <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-cache-ttl <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ transfer-format ( many-answers | one-answer );<br>
+ max-cache-size <TT
+CLASS="REPLACEABLE"
+><I
+>size_no_default</I
+></TT
+>;<br>
+ check-names ( master | slave | response )<br>
+ ( fail | warn | ignore );<br>
+ cache-file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ suppress-initial-notify <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // not yet implemented<br>
+ preferred-glue <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ dual-stack-servers [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] |<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] |<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] ); ...<br>
+ }<br>
+ edns-udp-size <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ root-delegation-only [<SPAN
+CLASS="OPTIONAL"
+> exclude { <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>; ... } </SPAN
+>];<br>
+ disable-algorithms <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> { <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>; ... };<br>
+ dnssec-enable <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ dnssec-lookaside <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> trust-anchor <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ dnssec-must-be-secure <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ ixfr-from-differences <TT
+CLASS="REPLACEABLE"
+><I
+>ixfrdiff</I
+></TT
+>;<br>
+ allow-query { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-transfer { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-update-forwarding { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-notify { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ notify <TT
+CLASS="REPLACEABLE"
+><I
+>notifytype</I
+></TT
+>;<br>
+ notify-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * ) [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ notify-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * ) [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ also-notify [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] { ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>]; ... };<br>
+ dialup <TT
+CLASS="REPLACEABLE"
+><I
+>dialuptype</I
+></TT
+>;<br>
+ forward ( first | only );<br>
+ forwarders [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> ) [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>]; ...<br>
+ };<br>
+ maintain-ixfr-base <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ max-ixfr-log-size <TT
+CLASS="REPLACEABLE"
+><I
+>size</I
+></TT
+>; // obsolete<br>
+ max-journal-size <TT
+CLASS="REPLACEABLE"
+><I
+>size_no_default</I
+></TT
+>;<br>
+ max-transfer-time-in <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-time-out <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-idle-in <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-idle-out <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-retry-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-retry-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-refresh-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-refresh-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ multi-master <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ sig-validity-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ transfer-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ transfer-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ alt-transfer-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ alt-transfer-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ use-alt-transfer-source <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ zone-statistics <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ key-directory <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+};<br> </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN183"
+></A
+><H2
+>CONTROLS</H2
+><P
+CLASS="LITERALLAYOUT"
+>controls {<br>
+ inet ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>]<br>
+ allow { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... }<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> keys { <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>; ... } </SPAN
+>];<br>
+ unix <TT
+CLASS="REPLACEABLE"
+><I
+>unsupported</I
+></TT
+>; // not implemented<br>
+};<br> </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN194"
+></A
+><H2
+>ACL</H2
+><P
+CLASS="LITERALLAYOUT"
+>acl <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br> </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN199"
+></A
+><H2
+>MASTERS</H2
+><P
+CLASS="LITERALLAYOUT"
+>masters <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>masters</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] |<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] ) [<SPAN
+CLASS="OPTIONAL"
+> key <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> </SPAN
+>]; ...<br>
+};<br> </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN214"
+></A
+><H2
+>LOGGING</H2
+><P
+CLASS="LITERALLAYOUT"
+>logging {<br>
+ channel <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> {<br>
+ file <TT
+CLASS="REPLACEABLE"
+><I
+>log_file</I
+></TT
+>;<br>
+ syslog <TT
+CLASS="REPLACEABLE"
+><I
+>optional_facility</I
+></TT
+>;<br>
+ null;<br>
+ stderr;<br>
+ severity <TT
+CLASS="REPLACEABLE"
+><I
+>log_severity</I
+></TT
+>;<br>
+ print-time <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ print-severity <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ print-category <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ };<br>
+ category <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> { <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>; ... };<br>
+};</P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN226"
+></A
+><H2
+>VIEW</H2
+><P
+CLASS="LITERALLAYOUT"
+><br>
+view <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>optional_class</I
+></TT
+> {<br>
+ match-clients { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ match-destinations { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ match-recursive-only <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ key <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> {<br>
+ algorithm <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ secret <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ };<br>
+ zone <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>optional_class</I
+></TT
+> {<br>
+ ...<br>
+ };<br>
+ server ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> ) {<br>
+ ...<br>
+ };<br>
+ trusted-keys {<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>; ...<br>
+ };<br>
+ allow-recursion { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-v6-synthesis { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... }; // obsolete<br>
+ sortlist { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ topology { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... }; // not implemented<br>
+ auth-nxdomain <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // default changed<br>
+ minimal-responses <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ recursion <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ rrset-order {<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> class <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> </SPAN
+>] [<SPAN
+CLASS="OPTIONAL"
+> type <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> </SPAN
+>]<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> name <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> </SPAN
+>] <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>; ...<br>
+ };<br>
+ provide-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ request-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ fetch-glue <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ rfc2308-type1 <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // not yet implemented<br>
+ additional-from-auth <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ additional-from-cache <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ query-source <TT
+CLASS="REPLACEABLE"
+><I
+>querysource4</I
+></TT
+>;<br>
+ query-source-v6 <TT
+CLASS="REPLACEABLE"
+><I
+>querysource6</I
+></TT
+>;<br>
+ cleaning-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-roots <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>; // not implemented<br>
+ lame-ttl <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-ncache-ttl <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-cache-ttl <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ transfer-format ( many-answers | one-answer );<br>
+ max-cache-size <TT
+CLASS="REPLACEABLE"
+><I
+>size_no_default</I
+></TT
+>;<br>
+ check-names ( master | slave | response )<br>
+ ( fail | warn | ignore );<br>
+ cache-file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+ suppress-initial-notify <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // not yet implemented<br>
+ preferred-glue <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ dual-stack-servers [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] |<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] |<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] ); ...<br>
+ };<br>
+ edns-udp-size <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ root-delegation-only [<SPAN
+CLASS="OPTIONAL"
+> exclude { <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>; ... } </SPAN
+>];<br>
+ disable-algorithms <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> { <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>; ... };<br>
+ dnssec-enable <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ dnssec-lookaside <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> trust-anchor <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ dnssec-must-be-secure <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ ixfr-from-differences <TT
+CLASS="REPLACEABLE"
+><I
+>ixfrdiff</I
+></TT
+>;<br>
+ allow-query { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-transfer { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-update-forwarding { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-notify { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ notify <TT
+CLASS="REPLACEABLE"
+><I
+>notifytype</I
+></TT
+>;<br>
+ notify-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * ) [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ notify-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * ) [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ also-notify [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] { ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>]; ... };<br>
+ dialup <TT
+CLASS="REPLACEABLE"
+><I
+>dialuptype</I
+></TT
+>;<br>
+ forward ( first | only );<br>
+ forwarders [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> ) [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>]; ...<br>
+ };<br>
+ maintain-ixfr-base <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ max-ixfr-log-size <TT
+CLASS="REPLACEABLE"
+><I
+>size</I
+></TT
+>; // obsolete<br>
+ max-journal-size <TT
+CLASS="REPLACEABLE"
+><I
+>size_no_default</I
+></TT
+>;<br>
+ max-transfer-time-in <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-time-out <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-idle-in <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-idle-out <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-retry-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-retry-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-refresh-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-refresh-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ multi-master <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ sig-validity-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ transfer-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ transfer-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ alt-transfer-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ alt-transfer-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ use-alt-transfer-source <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ zone-statistics <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ key-directory <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+};<br> </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN352"
+></A
+><H2
+>LWRES</H2
+><P
+CLASS="LITERALLAYOUT"
+>lwres {<br>
+ listen-on [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> ) [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>]; ...<br>
+ };<br>
+ view <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>optional_class</I
+></TT
+>;<br>
+ search { <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>; ... };<br>
+ ndots <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+};<br> </P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN365"
+></A
+><H2
+>KEY</H2
+><P
+CLASS="LITERALLAYOUT"
+>key <TT
+CLASS="REPLACEABLE"
+><I
+>domain_name</I
+></TT
+> {<br>
+ algorithm <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ secret <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+};</P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN371"
+></A
+><H2
+>ZONE</H2
+><P
+CLASS="LITERALLAYOUT"
+>zone <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>optional_class</I
+></TT
+> {<br>
+ type ( master | slave | stub | hint |<br>
+ forward | delegation-only );<br>
+ file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+<br>
+ masters [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>masters</I
+></TT
+> |<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+>port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></SPAN
+>] |<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] ) [<SPAN
+CLASS="OPTIONAL"
+> key <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> </SPAN
+>]; ...<br>
+ };<br>
+<br>
+ database <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+>;<br>
+ delegation-only <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ check-names ( fail | warn | ignore );<br>
+ dialup <TT
+CLASS="REPLACEABLE"
+><I
+>dialuptype</I
+></TT
+>;<br>
+ ixfr-from-differences <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+<br>
+ allow-query { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-transfer { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-update { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ allow-update-forwarding { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+ update-policy {<br>
+ ( grant | deny ) <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+><br>
+ ( name | subdomain | wildcard | self ) <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+><br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>rrtypelist</I
+></TT
+>; ...<br>
+ };<br>
+ notify <TT
+CLASS="REPLACEABLE"
+><I
+>notifytype</I
+></TT
+>;<br>
+ notify-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * ) [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ notify-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * ) [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ also-notify [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] { ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>]; ... };<br>
+ allow-notify { <TT
+CLASS="REPLACEABLE"
+><I
+>address_match_element</I
+></TT
+>; ... };<br>
+<br>
+ forward ( first | only );<br>
+ forwarders [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>] {<br>
+ ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> ) [<SPAN
+CLASS="OPTIONAL"
+> port <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> </SPAN
+>]; ...<br>
+ };<br>
+<br>
+ max-journal-size <TT
+CLASS="REPLACEABLE"
+><I
+>size_no_default</I
+></TT
+>;<br>
+ max-transfer-time-in <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-time-out <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-idle-in <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-transfer-idle-out <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-retry-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-retry-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ max-refresh-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ min-refresh-time <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ multi-master <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ sig-validity-interval <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+<br>
+ transfer-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ transfer-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+<br>
+ alt-transfer-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ alt-transfer-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ use-alt-transfer-source <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+<br>
+ zone-statistics <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ key-directory <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>;<br>
+<br>
+ ixfr-base <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>; // obsolete<br>
+ ixfr-tmp-file <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>; // obsolete<br>
+ maintain-ixfr-base <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ max-ixfr-log-size <TT
+CLASS="REPLACEABLE"
+><I
+>size</I
+></TT
+>; // obsolete<br>
+ pubkey <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
+>; // obsolete<br>
+};</P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN453"
+></A
+><H2
+>SERVER</H2
+><P
+CLASS="LITERALLAYOUT"
+>server ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> ) {<br>
+ bogus <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ edns <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ provide-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ request-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>;<br>
+ support-ixfr <TT
+CLASS="REPLACEABLE"
+><I
+>boolean</I
+></TT
+>; // obsolete<br>
+ keys <TT
+CLASS="REPLACEABLE"
+><I
+>server_key</I
+></TT
+>;<br>
+ transfers <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>;<br>
+ transfer-format ( many-answers | one-answer );<br>
+ transfer-source ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv4_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+ transfer-source-v6 ( <TT
+CLASS="REPLACEABLE"
+><I
+>ipv6_address</I
+></TT
+> | * )<br>
+ [<SPAN
+CLASS="OPTIONAL"
+> port ( <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> | * ) </SPAN
+>];<br>
+};</P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN471"
+></A
+><H2
+>TRUSTED-KEYS</H2
+><P
+CLASS="LITERALLAYOUT"
+>trusted-keys {<br>
+ <TT
+CLASS="REPLACEABLE"
+><I
+>domain_name</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>flags</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>protocol</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>algorithm</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>key</I
+></TT
+>; ... <br>
+};</P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN479"
+></A
+><H2
+>FILES</H2
+><P
+><TT
+CLASS="FILENAME"
+>/etc/named.conf</TT
+></P
+></DIV
+><DIV
+CLASS="REFSECT1"
+><A
+NAME="AEN483"
+></A
+><H2
+>SEE ALSO</H2
+><P
+><SPAN
+CLASS="CITEREFENTRY"
+><SPAN
+CLASS="REFENTRYTITLE"
+>named</SPAN
+>(8)</SPAN
+>,
+<SPAN
+CLASS="CITEREFENTRY"
+><SPAN
+CLASS="REFENTRYTITLE"
+>rndc</SPAN
+>(8)</SPAN
+>,
+<SPAN
+CLASS="CITEREFENTRY"
+><SPAN
+CLASS="REFENTRYTITLE"
+>BIND 9 Adminstrators Reference Manual</SPAN
+></SPAN
+>.</P
+></DIV
+></BODY
+></HTML
+>
projects / thirdparty / bind9.git / commitdiff
