></DT
><DT
>6.3. <A
-HREF="Bv9ARM.ch06.html#AEN4021"
+HREF="Bv9ARM.ch06.html#AEN4032"
>Zone File</A
></DT
></DL
>]
[<SPAN
CLASS="optional"
+> dnssec-must-be-secure <TT
+CLASS="replaceable"
+><I
+>domain yes_or_no</I
+></TT
+>; </SPAN
+>]
+ [<SPAN
+CLASS="optional"
> forward ( <TT
CLASS="replaceable"
><I
a DNSKEY (similarly to the way a DS record does) the DNSKEY RRset is deemed to be trusted.
</P
></DD
+><DT
+><B
+CLASS="command"
+>dnssec-must-be-secure</B
+></DT
+><DD
+><P
+> Specify heirachies which must / may not be secure (signed and validated).
+If <TT
+CLASS="userinput"
+><B
+>yes</B
+></TT
+> then named will only accept answers if they
+are secure.
+If <TT
+CLASS="userinput"
+><B
+>no</B
+></TT
+> then normal dnssec validation applies
+allowing for insecure answers to be accepted.
+The specified domain must be under a <B
+CLASS="command"
+>trusted-key</B
+> or
+<B
+CLASS="command"
+>dnssec-lookaside</B
+> must be active.
+</P
+></DD
></DL
></DIV
><DIV
><DIV
CLASS="informaltable"
><A
-NAME="AEN2403"
+NAME="AEN2414"
></A
><P
></P
><H3
CLASS="sect3"
><A
-NAME="AEN2683"
+NAME="AEN2694"
>6.2.16.2. Forwarding</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2702"
+NAME="AEN2713"
>6.2.16.3. 6 to 4 Servers</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2769"
+NAME="AEN2780"
>6.2.16.5. Interfaces</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2790"
+NAME="AEN2801"
>6.2.16.6. Query Address</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2952"
+NAME="AEN2963"
>6.2.16.8. Bad UDP Port Lists</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2957"
+NAME="AEN2968"
>6.2.16.9. Operating System Resource Limits</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2994"
+NAME="AEN3005"
>6.2.16.10. Server Resource Limits</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN3035"
+NAME="AEN3046"
>6.2.16.11. Periodic Task Intervals</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3123"
+NAME="AEN3134"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3267"
+NAME="AEN3278"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN3406"
+NAME="AEN3417"
>6.2.19. <B
CLASS="command"
>trusted-keys</B
><H2
CLASS="sect2"
><A
-NAME="AEN3422"
+NAME="AEN3433"
>6.2.20. <B
CLASS="command"
>trusted-keys</B
><H2
CLASS="sect2"
><A
-NAME="AEN3444"
+NAME="AEN3455"
>6.2.22. <B
CLASS="command"
>view</B
><H2
CLASS="sect2"
><A
-NAME="AEN3619"
+NAME="AEN3630"
>6.2.24. <B
CLASS="command"
>zone</B
><H3
CLASS="sect3"
><A
-NAME="AEN3622"
+NAME="AEN3633"
>6.2.24.1. Zone Types</A
></H3
><DIV
CLASS="informaltable"
><A
-NAME="AEN3624"
+NAME="AEN3635"
></A
><P
></P
><H3
CLASS="sect3"
><A
-NAME="AEN3687"
+NAME="AEN3698"
>6.2.24.2. Class</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN3697"
+NAME="AEN3708"
>6.2.24.3. Zone Options</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3980"
+NAME="AEN3991"
></A
><P
></P
><H1
CLASS="sect1"
><A
-NAME="AEN4021"
+NAME="AEN4032"
>6.3. Zone File</A
></H1
><DIV
><H3
CLASS="sect3"
><A
-NAME="AEN4026"
+NAME="AEN4037"
>6.3.1.1. Resource Records</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4032"
+NAME="AEN4043"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4064"
+NAME="AEN4075"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4216"
+NAME="AEN4227"
></A
><P
></P
><H3
CLASS="sect3"
><A
-NAME="AEN4240"
+NAME="AEN4251"
>6.3.1.2. Textual expression of RRs</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4247"
+NAME="AEN4258"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4313"
+NAME="AEN4324"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN4341"
+NAME="AEN4352"
>6.3.2. Discussion of MX Records</A
></H2
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4347"
+NAME="AEN4358"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4439"
+NAME="AEN4450"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN4462"
+NAME="AEN4473"
>6.3.4. Inverse Mapping in IPv4</A
></H2
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4467"
+NAME="AEN4478"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN4489"
+NAME="AEN4500"
>6.3.5. Other Zone File Directives</A
></H2
><P
><H3
CLASS="sect3"
><A
-NAME="AEN4496"
+NAME="AEN4507"
>6.3.5.1. The <B
CLASS="command"
>$ORIGIN</B
><H3
CLASS="sect3"
><A
-NAME="AEN4516"
+NAME="AEN4527"
>6.3.5.2. The <B
CLASS="command"
>$INCLUDE</B
><H3
CLASS="sect3"
><A
-NAME="AEN4536"
+NAME="AEN4547"
>6.3.5.3. The <B
CLASS="command"
>$TTL</B
><H2
CLASS="sect2"
><A
-NAME="AEN4547"
+NAME="AEN4558"
>6.3.6. <SPAN
CLASS="acronym"
>BIND</SPAN
><DIV
CLASS="informaltable"
><A
-NAME="AEN4571"
+NAME="AEN4582"
></A
><P
></P
></DT
><DT
>7.2. <A
-HREF="Bv9ARM.ch07.html#AEN4664"
+HREF="Bv9ARM.ch07.html#AEN4675"
><B
CLASS="command"
>chroot</B
><H1
CLASS="sect1"
><A
-NAME="AEN4664"
+NAME="AEN4675"
>7.2. <B
CLASS="command"
>chroot</B
><H2
CLASS="sect2"
><A
-NAME="AEN4687"
+NAME="AEN4698"
>7.2.1. The <B
CLASS="command"
>chroot</B
><H2
CLASS="sect2"
><A
-NAME="AEN4705"
+NAME="AEN4716"
>7.2.2. Using the <B
CLASS="command"
>setuid</B
></DT
><DT
>8.1. <A
-HREF="Bv9ARM.ch08.html#AEN4726"
+HREF="Bv9ARM.ch08.html#AEN4737"
>Common Problems</A
></DT
><DT
>8.2. <A
-HREF="Bv9ARM.ch08.html#AEN4731"
+HREF="Bv9ARM.ch08.html#AEN4742"
>Incrementing and Changing the Serial Number</A
></DT
><DT
>8.3. <A
-HREF="Bv9ARM.ch08.html#AEN4736"
+HREF="Bv9ARM.ch08.html#AEN4747"
>Where Can I Get Help?</A
></DT
></DL
><H1
CLASS="sect1"
><A
-NAME="AEN4726"
+NAME="AEN4737"
>8.1. Common Problems</A
></H1
><DIV
><H2
CLASS="sect2"
><A
-NAME="AEN4728"
+NAME="AEN4739"
>8.1.1. It's not working; how can I figure out what's wrong?</A
></H2
><P
><H1
CLASS="sect1"
><A
-NAME="AEN4731"
+NAME="AEN4742"
>8.2. Incrementing and Changing the Serial Number</A
></H1
><P
><H1
CLASS="sect1"
><A
-NAME="AEN4736"
+NAME="AEN4747"
>8.3. Where Can I Get Help?</A
></H1
><P
></DT
><DT
>A.1. <A
-HREF="Bv9ARM.ch09.html#AEN4752"
+HREF="Bv9ARM.ch09.html#AEN4763"
>Acknowledgments</A
></DT
><DT
><H1
CLASS="sect1"
><A
-NAME="AEN4752"
+NAME="AEN4763"
>A.1. Acknowledgments</A
></H1
><DIV
><H2
CLASS="sect2"
><A
-NAME="AEN4754"
+NAME="AEN4765"
>A.1.1. A Brief History of the <SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="informaltable"
><A
-NAME="AEN4790"
+NAME="AEN4801"
></A
><P
></P
<DIV
CLASS="informaltable"
><A
-NAME="AEN4859"
+NAME="AEN4870"
></A
><P
></P
</P
><H3
><A
-NAME="AEN4927"
+NAME="AEN4938"
>Bibliography</A
></H3
><H2
CLASS="bibliodiv"
><A
-NAME="AEN4928"
+NAME="AEN4939"
>Standards</A
></H2
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4930"
+NAME="AEN4941"
></A
><P
>[RFC974] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4937"
+NAME="AEN4948"
></A
><P
>[RFC1034] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4944"
+NAME="AEN4955"
></A
><P
>[RFC1035] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4953"
+NAME="AEN4964"
></A
><P
>[RFC2181] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4961"
+NAME="AEN4972"
></A
><P
>[RFC2308] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4969"
+NAME="AEN4980"
></A
><P
>[RFC1995] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4977"
+NAME="AEN4988"
></A
><P
>[RFC1996] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4984"
+NAME="AEN4995"
></A
><P
>[RFC2136] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5001"
+NAME="AEN5012"
></A
><P
>[RFC2845] <SPAN
><H2
CLASS="bibliodiv"
><A
-NAME="AEN5020"
+NAME="AEN5031"
>Proposed Standards Still Under Development</A
></H2
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5025"
+NAME="AEN5036"
></A
><P
>[RFC1886] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5037"
+NAME="AEN5048"
></A
><P
>[RFC2065] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5049"
+NAME="AEN5060"
></A
><P
>[RFC2137] <SPAN
><H2
CLASS="bibliodiv"
><A
-NAME="AEN5057"
+NAME="AEN5068"
>Other Important RFCs About <SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5060"
+NAME="AEN5071"
></A
><P
>[RFC1535] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5068"
+NAME="AEN5079"
></A
><P
>[RFC1536] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5089"
+NAME="AEN5100"
></A
><P
>[RFC1982] <SPAN
><H2
CLASS="bibliodiv"
><A
-NAME="AEN5100"
+NAME="AEN5111"
>Resource Record Types</A
></H2
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5102"
+NAME="AEN5113"
></A
><P
>[RFC1183] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5120"
+NAME="AEN5131"
></A
><P
>[RFC1706] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5132"
+NAME="AEN5143"
></A
><P
>[RFC2168] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5143"
+NAME="AEN5154"
></A
><P
>[RFC1876] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5160"
+NAME="AEN5171"
></A
><P
>[RFC2052] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5172"
+NAME="AEN5183"
></A
><P
>[RFC2163] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5180"
+NAME="AEN5191"
></A
><P
>[RFC2230] <SPAN
><H2
CLASS="bibliodiv"
><A
-NAME="AEN5188"
+NAME="AEN5199"
><SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5191"
+NAME="AEN5202"
></A
><P
>[RFC1101] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5199"
+NAME="AEN5210"
></A
><P
>[RFC1123] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5206"
+NAME="AEN5217"
></A
><P
>[RFC1591] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5213"
+NAME="AEN5224"
></A
><P
>[RFC2317] <SPAN
><H2
CLASS="bibliodiv"
><A
-NAME="AEN5227"
+NAME="AEN5238"
><SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5230"
+NAME="AEN5241"
></A
><P
>[RFC1537] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5238"
+NAME="AEN5249"
></A
><P
>[RFC1912] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5246"
+NAME="AEN5257"
></A
><P
>[RFC2010] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5257"
+NAME="AEN5268"
></A
><P
>[RFC2219] <SPAN
><H2
CLASS="bibliodiv"
><A
-NAME="AEN5269"
+NAME="AEN5280"
>Other <SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5275"
+NAME="AEN5286"
></A
><P
>[RFC1464] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5282"
+NAME="AEN5293"
></A
><P
>[RFC1713] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5290"
+NAME="AEN5301"
></A
><P
>[RFC1794] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5298"
+NAME="AEN5309"
></A
><P
>[RFC2240] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5305"
+NAME="AEN5316"
></A
><P
>[RFC2345] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5319"
+NAME="AEN5330"
></A
><P
>[RFC2352] <SPAN
><H2
CLASS="bibliodiv"
><A
-NAME="AEN5326"
+NAME="AEN5337"
>Obsolete and Unimplemented Experimental RRs</A
></H2
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5328"
+NAME="AEN5339"
></A
><P
>[RFC1712] <SPAN
><H2
CLASS="sect2"
><A
-NAME="AEN5349"
+NAME="AEN5360"
>A.3.3. Other Documents About <SPAN
CLASS="acronym"
>BIND</SPAN
></P
><H3
><A
-NAME="AEN5353"
+NAME="AEN5364"
>Bibliography</A
></H3
><DIV
CLASS="biblioentry"
><A
-NAME="AEN5354"
+NAME="AEN5365"
></A
><P
><SPAN
></DT
><DT
>6.2.19. <A
-HREF="Bv9ARM.ch06.html#AEN3406"
+HREF="Bv9ARM.ch06.html#AEN3417"
><B
CLASS="command"
>trusted-keys</B
></DT
><DT
>6.2.20. <A
-HREF="Bv9ARM.ch06.html#AEN3422"
+HREF="Bv9ARM.ch06.html#AEN3433"
><B
CLASS="command"
>trusted-keys</B
></DT
><DT
>6.2.22. <A
-HREF="Bv9ARM.ch06.html#AEN3444"
+HREF="Bv9ARM.ch06.html#AEN3455"
><B
CLASS="command"
>view</B
></DT
><DT
>6.2.24. <A
-HREF="Bv9ARM.ch06.html#AEN3619"
+HREF="Bv9ARM.ch06.html#AEN3630"
><B
CLASS="command"
>zone</B
></DD
><DT
>6.3. <A
-HREF="Bv9ARM.ch06.html#AEN4021"
+HREF="Bv9ARM.ch06.html#AEN4032"
>Zone File</A
></DT
><DD
></DT
><DT
>6.3.2. <A
-HREF="Bv9ARM.ch06.html#AEN4341"
+HREF="Bv9ARM.ch06.html#AEN4352"
>Discussion of MX Records</A
></DT
><DT
></DT
><DT
>6.3.4. <A
-HREF="Bv9ARM.ch06.html#AEN4462"
+HREF="Bv9ARM.ch06.html#AEN4473"
>Inverse Mapping in IPv4</A
></DT
><DT
>6.3.5. <A
-HREF="Bv9ARM.ch06.html#AEN4489"
+HREF="Bv9ARM.ch06.html#AEN4500"
>Other Zone File Directives</A
></DT
><DT
>6.3.6. <A
-HREF="Bv9ARM.ch06.html#AEN4547"
+HREF="Bv9ARM.ch06.html#AEN4558"
><SPAN
CLASS="acronym"
>BIND</SPAN
></DT
><DT
>7.2. <A
-HREF="Bv9ARM.ch07.html#AEN4664"
+HREF="Bv9ARM.ch07.html#AEN4675"
><B
CLASS="command"
>chroot</B
><DL
><DT
>7.2.1. <A
-HREF="Bv9ARM.ch07.html#AEN4687"
+HREF="Bv9ARM.ch07.html#AEN4698"
>The <B
CLASS="command"
>chroot</B
></DT
><DT
>7.2.2. <A
-HREF="Bv9ARM.ch07.html#AEN4705"
+HREF="Bv9ARM.ch07.html#AEN4716"
>Using the <B
CLASS="command"
>setuid</B
><DL
><DT
>8.1. <A
-HREF="Bv9ARM.ch08.html#AEN4726"
+HREF="Bv9ARM.ch08.html#AEN4737"
>Common Problems</A
></DT
><DD
><DL
><DT
>8.1.1. <A
-HREF="Bv9ARM.ch08.html#AEN4728"
+HREF="Bv9ARM.ch08.html#AEN4739"
>It's not working; how can I figure out what's wrong?</A
></DT
></DL
></DD
><DT
>8.2. <A
-HREF="Bv9ARM.ch08.html#AEN4731"
+HREF="Bv9ARM.ch08.html#AEN4742"
>Incrementing and Changing the Serial Number</A
></DT
><DT
>8.3. <A
-HREF="Bv9ARM.ch08.html#AEN4736"
+HREF="Bv9ARM.ch08.html#AEN4747"
>Where Can I Get Help?</A
></DT
></DL
><DL
><DT
>A.1. <A
-HREF="Bv9ARM.ch09.html#AEN4752"
+HREF="Bv9ARM.ch09.html#AEN4763"
>Acknowledgments</A
></DT
><DD
><DL
><DT
>A.1.1. <A
-HREF="Bv9ARM.ch09.html#AEN4754"
+HREF="Bv9ARM.ch09.html#AEN4765"
>A Brief History of the <SPAN
CLASS="acronym"
>DNS</SPAN
></DT
><DT
>A.3.3. <A
-HREF="Bv9ARM.ch09.html#AEN5349"
+HREF="Bv9ARM.ch09.html#AEN5360"
>Other Documents About <SPAN
CLASS="acronym"
>BIND</SPAN
disable-algorithms <string> { <string>; ... };
dnssec-enable <boolean>;
dnssec-lookaside <string>;
+ dnssec-must-be-secure <string> <boolean>;
allow-query { <address_match_element>; ... };
allow-transfer { <address_match_element>; ... };
allow-update-forwarding { <address_match_element>; ... };
disable-algorithms <string> { <string>; ... };
dnssec-enable <boolean>;
dnssec-lookaside <string>;
+ dnssec-must-be-secure <string> <boolean>;
allow-query { <address_match_element>; ... };
allow-transfer { <address_match_element>; ... };
allow-update-forwarding { <address_match_element>; ... };
projects / thirdparty / bind9.git / commitdiff
