named.conf
— configuration file for named
named.conf
named.conf is the configuration file
for
named. Statements are enclosed
in braces and terminated with a semi-colon. Clauses in
the statements are also semi-colon terminated. The usual
comment styles are supported:
C style: /* */
C++ style: // to end of line
Unix style: # to end of line
controls{
inet(ipv4_address|ipv6_address|
*)[port(integer|*)]allow
{address_match_element;...}[
keys{string;...}][read-only
boolean];
unixquoted_stringperminteger
ownerintegergroupinteger[
keys{string;...}][read-only
boolean];
};
logging{
categorystring{string;...};
channelstring{
bufferedboolean;
filequoted_string[versions("unlimited"|integer)
][sizesize];
null;
print-categoryboolean;
print-severityboolean;
print-timeboolean;
severitylog_severity;
stderr;
syslog[syslog_facility];
};
};
lwres{
listen-on[portinteger][dscpinteger]{(ipv4_address
|ipv6_address)[portinteger][dscpinteger];...};
lwres-clientsinteger;
lwres-tasksinteger;
ndotsinteger;
search{string;...};
viewstring[class];
};
mastersstring[portinteger][dscp
integer]{(masters|ipv4_address[
portinteger]|ipv6_address[port
integer])[keystring];...};
options{
acache-cleaning-intervalinteger;
acache-enableboolean;
additional-from-authboolean;
additional-from-cacheboolean;
allow-new-zonesboolean;
allow-notify{address_match_element;...};
allow-query{address_match_element;...};
allow-query-cache{address_match_element;...};
allow-query-cache-on{address_match_element;...};
allow-query-on{address_match_element;...};
allow-recursion{address_match_element;...};
allow-recursion-on{address_match_element;...};
allow-transfer{address_match_element;...};
allow-update{address_match_element;...};
allow-update-forwarding{address_match_element;...};
also-notify[portinteger][dscpinteger]{(masters|
ipv4_address[portinteger]|ipv6_address[port
integer])[keystring];...};
alt-transfer-source(ipv4_address|*)[port(integer|*)
][dscpinteger];
alt-transfer-source-v6(ipv6_address|*)[port(integer|
*)][dscpinteger];
answer-cookieboolean;
attach-cachestring;
auth-nxdomainboolean;//defaultchanged
auto-dnssec(allow|maintain|off);
automatic-interface-scanboolean;
avoid-v4-udp-ports{portrange;...};
avoid-v6-udp-ports{portrange;...};
bindkeys-filequoted_string;
blackhole{address_match_element;...};
cache-filequoted_string;
catalog-zones{zonequoted_string[default-masters[port
integer][dscpinteger]{(masters|ipv4_address[
portinteger]|ipv6_address[portinteger])[key
string];...}][zone-directoryquoted_string][
in-memoryboolean][min-update-intervalinteger];...};
check-dup-records(fail|warn|ignore);
check-integrityboolean;
check-mx(fail|warn|ignore);
check-mx-cname(fail|warn|ignore);
check-names(master|slave|response
)(fail|warn|ignore);
check-siblingboolean;
check-spf(warn|ignore);
check-srv-cname(fail|warn|ignore);
check-wildcardboolean;
cleaning-intervalinteger;
clients-per-queryinteger;
cookie-algorithm(aes|sha1|sha256);
cookie-secretstring;
coresize(default|unlimited|sizeval);
datasize(default|unlimited|sizeval);
deny-answer-addresses{address_match_element;...}[
except-from{quoted_string;...}];
deny-answer-aliases{quoted_string;...}[except-from{
quoted_string;...}];
dialup(notify|notify-passive|passive|refresh|boolean);
directoryquoted_string;
disable-algorithmsstring{string;
...};
disable-ds-digestsstring{string;
...};
disable-empty-zonestring;
dns64netprefix{
break-dnssecboolean;
clients{address_match_element;...};
exclude{address_match_element;...};
mapped{address_match_element;...};
recursive-onlyboolean;
suffixipv6_address;
};
dns64-contactstring;
dns64-serverstring;
dnssec-accept-expiredboolean;
dnssec-dnskey-kskonlyboolean;
dnssec-enableboolean;
dnssec-loadkeys-intervalinteger;
dnssec-lookaside(stringtrust-anchor
string|auto|no);
dnssec-must-be-securestringboolean;
dnssec-secure-to-insecureboolean;
dnssec-update-mode(maintain|no-resign);
dnssec-validation(yes|no|auto);
dnstap{(all|auth|client|forwarder|
resolver)[(query|response)];...};
dnstap-identity(quoted_string|none|
hostname);
dnstap-output(file|unix)quoted_string;
dnstap-version(quoted_string|none);
dscpinteger;
dual-stack-servers[portinteger]{(quoted_string[port
integer][dscpinteger]|ipv4_address[port
integer][dscpinteger]|ipv6_address[port
integer][dscpinteger]);...};
dump-filequoted_string;
edns-udp-sizeinteger;
empty-contactstring;
empty-serverstring;
empty-zones-enableboolean;
fetch-quota-paramsintegerfixedpointfixedpointfixedpoint;
fetches-per-serverinteger[(drop|fail)];
fetches-per-zoneinteger[(drop|fail)];
files(default|unlimited|sizeval);
filter-aaaa{address_match_element;...};
filter-aaaa-on-v4(break-dnssec|boolean);
filter-aaaa-on-v6(break-dnssec|boolean);
flush-zones-on-shutdownboolean;
forward(first|only);
forwarders[portinteger][dscpinteger]{(ipv4_address
|ipv6_address)[portinteger][dscpinteger];...};
fstrm-set-buffer-hintinteger;
fstrm-set-flush-timeoutinteger;
fstrm-set-input-queue-sizeinteger;
fstrm-set-output-notify-thresholdinteger;
fstrm-set-output-queue-model(mpsc|spsc);
fstrm-set-output-queue-sizeinteger;
fstrm-set-reopen-intervalinteger;
geoip-directory(quoted_string|none);
geoip-use-ecsboolean;
heartbeat-intervalinteger;
hostname(quoted_string|none);
inline-signingboolean;
interface-intervalinteger;
ixfr-from-differences(master|slave|boolean);
keep-response-order{address_match_element;...};
key-directoryquoted_string;
lame-ttlttlval;
listen-on[portinteger][dscp
integer]{
address_match_element;...};
listen-on-v6[portinteger][dscp
integer]{
address_match_element;...};
lmdb-mapsizesizeval;
lock-file(quoted_string|none);
managed-keys-directoryquoted_string;
masterfile-format(map|raw|text);
masterfile-style(full|relative);
match-mapped-addressesboolean;
max-acache-size(unlimited|sizeval);
max-cache-size(default|unlimited|sizeval|percentage);
max-cache-ttlinteger;
max-clients-per-queryinteger;
max-journal-size(unlimited|sizeval);
max-ncache-ttlinteger;
max-recordsinteger;
max-recursion-depthinteger;
max-recursion-queriesinteger;
max-refresh-timeinteger;
max-retry-timeinteger;
max-rsa-exponent-sizeinteger;
max-transfer-idle-ininteger;
max-transfer-idle-outinteger;
max-transfer-time-ininteger;
max-transfer-time-outinteger;
max-udp-sizeinteger;
max-zone-ttl(unlimited|ttlval);
memstatisticsboolean;
memstatistics-filequoted_string;
message-compressionboolean;
min-refresh-timeinteger;
min-retry-timeinteger;
minimal-anyboolean;
minimal-responses(no-auth|no-auth-recursive|boolean);
multi-masterboolean;
no-case-compress{address_match_element;...};
nocookie-udp-sizeinteger;
notify(explicit|master-only|boolean);
notify-delayinteger;
notify-rateinteger;
notify-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
notify-source-v6(ipv6_address|*)[port(integer|*)]
[dscpinteger];
notify-to-soaboolean;
nta-lifetimettlval;
nta-recheckttlval;
nxdomain-redirectstring;
pid-file(quoted_string|none);
portinteger;
preferred-gluestring;
prefetchinteger[integer];
provide-ixfrboolean;
query-source(([address](ipv4_address|*)[port(
integer|*)])|([[address](ipv4_address|*)]
port(integer|*)))[dscpinteger];
query-source-v6(([address](ipv6_address|*)[port(
integer|*)])|([[address](ipv6_address|*)]
port(integer|*)))[dscpinteger];
querylogboolean;
random-devicequoted_string;
rate-limit{
all-per-secondinteger;
errors-per-secondinteger;
exempt-clients{address_match_element;...};
ipv4-prefix-lengthinteger;
ipv6-prefix-lengthinteger;
log-onlyboolean;
max-table-sizeinteger;
min-table-sizeinteger;
nodata-per-secondinteger;
nxdomains-per-secondinteger;
qps-scaleinteger;
referrals-per-secondinteger;
responses-per-secondinteger;
slipinteger;
windowinteger;
};
recursing-filequoted_string;
recursionboolean;
recursive-clientsinteger;
request-expireboolean;
request-ixfrboolean;
request-nsidboolean;
require-server-cookieboolean;
reserved-socketsinteger;
resolver-query-timeoutinteger;
response-policy{zonequoted_string[logboolean][
max-policy-ttlinteger][policy(cname|disabled|drop|
given|no-op|nodata|nxdomain|passthru|tcp-only
quoted_string)][recursive-onlyboolean];...}[
break-dnssecboolean][max-policy-ttlinteger][
min-ns-dotsinteger][nsip-wait-recurseboolean][
qname-wait-recurseboolean][recursive-onlyboolean];
root-delegation-only[exclude{quoted_string;...}];
root-key-sentinelboolean;
rrset-order{[classstring][typestring][name
quoted_string]stringstring;...};
secroots-filequoted_string;
send-cookieboolean;
serial-query-rateinteger;
serial-update-method(date|increment|unixtime);
server-id(quoted_string|none|hostname);
servfail-ttlttlval;
session-keyalgstring;
session-keyfile(quoted_string|none);
session-keynamestring;
sig-signing-nodesinteger;
sig-signing-signaturesinteger;
sig-signing-typeinteger;
sig-validity-intervalinteger[integer];
sortlist{address_match_element;...};
stacksize(default|unlimited|sizeval);
startup-notify-rateinteger;
statistics-filequoted_string;
tcp-clientsinteger;
tcp-listen-queueinteger;
tkey-dhkeyquoted_stringinteger;
tkey-domainquoted_string;
tkey-gssapi-credentialquoted_string;
tkey-gssapi-keytabquoted_string;
transfer-format(many-answers|one-answer);
transfer-message-sizeinteger;
transfer-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
transfer-source-v6(ipv6_address|*)[port(integer|*)
][dscpinteger];
transfers-ininteger;
transfers-outinteger;
transfers-per-nsinteger;
trust-anchor-telemetryboolean;//experimental
try-tcp-refreshboolean;
update-check-kskboolean;
use-alt-transfer-sourceboolean;
use-v4-udp-ports{portrange;...};
use-v6-udp-ports{portrange;...};
v6-biasinteger;
version(quoted_string|none);
zero-no-soa-ttlboolean;
zero-no-soa-ttl-cacheboolean;
zone-statistics(full|terse|none|boolean);
};
servernetprefix{
bogusboolean;
ednsboolean;
edns-udp-sizeinteger;
edns-versioninteger;
keysserver_key;
max-udp-sizeinteger;
notify-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
notify-source-v6(ipv6_address|*)[port(integer|*)]
[dscpinteger];
provide-ixfrboolean;
query-source(([address](ipv4_address|*)[port(
integer|*)])|([[address](ipv4_address|*)]
port(integer|*)))[dscpinteger];
query-source-v6(([address](ipv6_address|*)[port(
integer|*)])|([[address](ipv6_address|*)]
port(integer|*)))[dscpinteger];
request-expireboolean;
request-ixfrboolean;
request-nsidboolean;
send-cookieboolean;
tcp-onlyboolean;
transfer-format(many-answers|one-answer);
transfer-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
transfer-source-v6(ipv6_address|*)[port(integer|*)
][dscpinteger];
transfersinteger;
};
statistics-channels{
inet(ipv4_address|ipv6_address|
*)[port(integer|*)][
allow{address_match_element;...
}];
};
viewstring[class]{
acache-cleaning-intervalinteger;
acache-enableboolean;
additional-from-authboolean;
additional-from-cacheboolean;
allow-new-zonesboolean;
allow-notify{address_match_element;...};
allow-query{address_match_element;...};
allow-query-cache{address_match_element;...};
allow-query-cache-on{address_match_element;...};
allow-query-on{address_match_element;...};
allow-recursion{address_match_element;...};
allow-recursion-on{address_match_element;...};
allow-transfer{address_match_element;...};
allow-update{address_match_element;...};
allow-update-forwarding{address_match_element;...};
also-notify[portinteger][dscpinteger]{(masters|
ipv4_address[portinteger]|ipv6_address[port
integer])[keystring];...};
alt-transfer-source(ipv4_address|*)[port(integer|*)
][dscpinteger];
alt-transfer-source-v6(ipv6_address|*)[port(integer|
*)][dscpinteger];
attach-cachestring;
auth-nxdomainboolean;//defaultchanged
auto-dnssec(allow|maintain|off);
cache-filequoted_string;
catalog-zones{zonequoted_string[default-masters[port
integer][dscpinteger]{(masters|ipv4_address[
portinteger]|ipv6_address[portinteger])[key
string];...}][zone-directoryquoted_string][
in-memoryboolean][min-update-intervalinteger];...};
check-dup-records(fail|warn|ignore);
check-integrityboolean;
check-mx(fail|warn|ignore);
check-mx-cname(fail|warn|ignore);
check-names(master|slave|response
)(fail|warn|ignore);
check-siblingboolean;
check-spf(warn|ignore);
check-srv-cname(fail|warn|ignore);
check-wildcardboolean;
cleaning-intervalinteger;
clients-per-queryinteger;
deny-answer-addresses{address_match_element;...}[
except-from{quoted_string;...}];
deny-answer-aliases{quoted_string;...}[except-from{
quoted_string;...}];
dialup(notify|notify-passive|passive|refresh|boolean);
disable-algorithmsstring{string;
...};
disable-ds-digestsstring{string;
...};
disable-empty-zonestring;
dlzstring{
databasestring;
searchboolean;
};
dns64netprefix{
break-dnssecboolean;
clients{address_match_element;...};
exclude{address_match_element;...};
mapped{address_match_element;...};
recursive-onlyboolean;
suffixipv6_address;
};
dns64-contactstring;
dns64-serverstring;
dnssec-accept-expiredboolean;
dnssec-dnskey-kskonlyboolean;
dnssec-enableboolean;
dnssec-loadkeys-intervalinteger;
dnssec-lookaside(stringtrust-anchor
string|auto|no);
dnssec-must-be-securestringboolean;
dnssec-secure-to-insecureboolean;
dnssec-update-mode(maintain|no-resign);
dnssec-validation(yes|no|auto);
dnstap{(all|auth|client|forwarder|
resolver)[(query|response)];...};
dual-stack-servers[portinteger]{(quoted_string[port
integer][dscpinteger]|ipv4_address[port
integer][dscpinteger]|ipv6_address[port
integer][dscpinteger]);...};
dyndbstringquoted_string{
unspecified-text};
edns-udp-sizeinteger;
empty-contactstring;
empty-serverstring;
empty-zones-enableboolean;
fetch-quota-paramsintegerfixedpointfixedpointfixedpoint;
fetches-per-serverinteger[(drop|fail)];
fetches-per-zoneinteger[(drop|fail)];
filter-aaaa{address_match_element;...};
filter-aaaa-on-v4(break-dnssec|boolean);
filter-aaaa-on-v6(break-dnssec|boolean);
forward(first|only);
forwarders[portinteger][dscpinteger]{(ipv4_address
|ipv6_address)[portinteger][dscpinteger];...};
inline-signingboolean;
ixfr-from-differences(master|slave|boolean);
keystring{
algorithmstring;
secretstring;
};
key-directoryquoted_string;
lame-ttlttlval;
lmdb-mapsizesizeval;
managed-keys{stringstring
integerintegerinteger
quoted_string;...};
masterfile-format(map|raw|text);
masterfile-style(full|relative);
match-clients{address_match_element;...};
match-destinations{address_match_element;...};
match-recursive-onlyboolean;
max-acache-size(unlimited|sizeval);
max-cache-size(default|unlimited|sizeval|percentage);
max-cache-ttlinteger;
max-clients-per-queryinteger;
max-journal-size(unlimited|sizeval);
max-ncache-ttlinteger;
max-recordsinteger;
max-recursion-depthinteger;
max-recursion-queriesinteger;
max-refresh-timeinteger;
max-retry-timeinteger;
max-transfer-idle-ininteger;
max-transfer-idle-outinteger;
max-transfer-time-ininteger;
max-transfer-time-outinteger;
max-udp-sizeinteger;
max-zone-ttl(unlimited|ttlval);
message-compressionboolean;
min-refresh-timeinteger;
min-retry-timeinteger;
minimal-anyboolean;
minimal-responses(no-auth|no-auth-recursive|boolean);
multi-masterboolean;
no-case-compress{address_match_element;...};
nocookie-udp-sizeinteger;
notify(explicit|master-only|boolean);
notify-delayinteger;
notify-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
notify-source-v6(ipv6_address|*)[port(integer|*)]
[dscpinteger];
notify-to-soaboolean;
nta-lifetimettlval;
nta-recheckttlval;
nxdomain-redirectstring;
preferred-gluestring;
prefetchinteger[integer];
provide-ixfrboolean;
query-source(([address](ipv4_address|*)[port(
integer|*)])|([[address](ipv4_address|*)]
port(integer|*)))[dscpinteger];
query-source-v6(([address](ipv6_address|*)[port(
integer|*)])|([[address](ipv6_address|*)]
port(integer|*)))[dscpinteger];
rate-limit{
all-per-secondinteger;
errors-per-secondinteger;
exempt-clients{address_match_element;...};
ipv4-prefix-lengthinteger;
ipv6-prefix-lengthinteger;
log-onlyboolean;
max-table-sizeinteger;
min-table-sizeinteger;
nodata-per-secondinteger;
nxdomains-per-secondinteger;
qps-scaleinteger;
referrals-per-secondinteger;
responses-per-secondinteger;
slipinteger;
windowinteger;
};
recursionboolean;
request-expireboolean;
request-ixfrboolean;
request-nsidboolean;
require-server-cookieboolean;
resolver-query-timeoutinteger;
response-policy{zonequoted_string[logboolean][
max-policy-ttlinteger][policy(cname|disabled|drop|
given|no-op|nodata|nxdomain|passthru|tcp-only
quoted_string)][recursive-onlyboolean];...}[
break-dnssecboolean][max-policy-ttlinteger][
min-ns-dotsinteger][nsip-wait-recurseboolean][
qname-wait-recurseboolean][recursive-onlyboolean];
root-delegation-only[exclude{quoted_string;...}];
root-key-sentinelboolean;
rrset-order{[classstring][typestring][name
quoted_string]stringstring;...};
send-cookieboolean;
serial-update-method(date|increment|unixtime);
servernetprefix{
bogusboolean;
ednsboolean;
edns-udp-sizeinteger;
edns-versioninteger;
keysserver_key;
max-udp-sizeinteger;
notify-source(ipv4_address|*)[port(integer|*
)][dscpinteger];
notify-source-v6(ipv6_address|*)[port(integer
|*)][dscpinteger];
provide-ixfrboolean;
query-source(([address](ipv4_address|*)[port
(integer|*)])|([[address](
ipv4_address|*)]port(integer|*)))[
dscpinteger];
query-source-v6(([address](ipv6_address|*)[
port(integer|*)])|([[address](
ipv6_address|*)]port(integer|*)))[
dscpinteger];
request-expireboolean;
request-ixfrboolean;
request-nsidboolean;
send-cookieboolean;
tcp-onlyboolean;
transfer-format(many-answers|one-answer);
transfer-source(ipv4_address|*)[port(integer|
*)][dscpinteger];
transfer-source-v6(ipv6_address|*)[port(
integer|*)][dscpinteger];
transfersinteger;
};
servfail-ttlttlval;
sig-signing-nodesinteger;
sig-signing-signaturesinteger;
sig-signing-typeinteger;
sig-validity-intervalinteger[integer];
sortlist{address_match_element;...};
transfer-format(many-answers|one-answer);
transfer-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
transfer-source-v6(ipv6_address|*)[port(integer|*)
][dscpinteger];
trust-anchor-telemetryboolean;//experimental
trusted-keys{stringinteger
integerintegerquoted_string;
...};
try-tcp-refreshboolean;
update-check-kskboolean;
use-alt-transfer-sourceboolean;
v6-biasinteger;
zero-no-soa-ttlboolean;
zero-no-soa-ttl-cacheboolean;
zonestring[class]{
allow-notify{address_match_element;...};
allow-query{address_match_element;...};
allow-query-on{address_match_element;...};
allow-transfer{address_match_element;...};
allow-update{address_match_element;...};
allow-update-forwarding{address_match_element;...};
also-notify[portinteger][dscpinteger]{(
masters|ipv4_address[portinteger]|
ipv6_address[portinteger])[keystring];
...};
alt-transfer-source(ipv4_address|*)[port(
integer|*)][dscpinteger];
alt-transfer-source-v6(ipv6_address|*)[port(
integer|*)][dscpinteger];
auto-dnssec(allow|maintain|off);
check-dup-records(fail|warn|ignore);
check-integrityboolean;
check-mx(fail|warn|ignore);
check-mx-cname(fail|warn|ignore);
check-names(fail|warn|ignore);
check-siblingboolean;
check-spf(warn|ignore);
check-srv-cname(fail|warn|ignore);
check-wildcardboolean;
databasestring;
delegation-onlyboolean;
dialup(notify|notify-passive|passive|refresh|
boolean);
dlzstring;
dnssec-dnskey-kskonlyboolean;
dnssec-loadkeys-intervalinteger;
dnssec-secure-to-insecureboolean;
dnssec-update-mode(maintain|no-resign);
filequoted_string;
forward(first|only);
forwarders[portinteger][dscpinteger]{(
ipv4_address|ipv6_address)[portinteger][
dscpinteger];...};
in-viewstring;
inline-signingboolean;
ixfr-from-differencesboolean;
journalquoted_string;
key-directoryquoted_string;
masterfile-format(map|raw|text);
masterfile-style(full|relative);
masters[portinteger][dscpinteger]{(masters
|ipv4_address[portinteger]|ipv6_address[
portinteger])[keystring];...};
max-ixfr-log-size(default|unlimited|
max-journal-size(unlimited|sizeval);
max-recordsinteger;
max-refresh-timeinteger;
max-retry-timeinteger;
max-transfer-idle-ininteger;
max-transfer-idle-outinteger;
max-transfer-time-ininteger;
max-transfer-time-outinteger;
max-zone-ttl(unlimited|ttlval);
min-refresh-timeinteger;
min-retry-timeinteger;
multi-masterboolean;
notify(explicit|master-only|boolean);
notify-delayinteger;
notify-source(ipv4_address|*)[port(integer|*
)][dscpinteger];
notify-source-v6(ipv6_address|*)[port(integer
|*)][dscpinteger];
notify-to-soaboolean;
pubkeyinteger
integer
integer
request-expireboolean;
request-ixfrboolean;
serial-update-method(date|increment|unixtime);
server-addresses{(ipv4_address|ipv6_address)[
portinteger];...};
server-names{quoted_string;...};
sig-signing-nodesinteger;
sig-signing-signaturesinteger;
sig-signing-typeinteger;
sig-validity-intervalinteger[integer];
transfer-source(ipv4_address|*)[port(integer|
*)][dscpinteger];
transfer-source-v6(ipv6_address|*)[port(
integer|*)][dscpinteger];
try-tcp-refreshboolean;
type(delegation-only|forward|hint|master|redirect
|slave|static-stub|stub);
update-check-kskboolean;
update-policy(local|{(deny|grant)string(
6to4-self|external|krb5-self|krb5-subdomain|
ms-self|ms-subdomain|name|self|selfsub|
selfwild|subdomain|tcp-self|wildcard|zonesub)
[string]rrtypelist;...};
use-alt-transfer-sourceboolean;
zero-no-soa-ttlboolean;
zone-statistics(full|terse|none|boolean);
};
zone-statistics(full|terse|none|boolean);
};
zonestring[class]{
allow-notify{address_match_element;...};
allow-query{address_match_element;...};
allow-query-on{address_match_element;...};
allow-transfer{address_match_element;...};
allow-update{address_match_element;...};
allow-update-forwarding{address_match_element;...};
also-notify[portinteger][dscpinteger]{(masters|
ipv4_address[portinteger]|ipv6_address[port
integer])[keystring];...};
alt-transfer-source(ipv4_address|*)[port(integer|*)
][dscpinteger];
alt-transfer-source-v6(ipv6_address|*)[port(integer|
*)][dscpinteger];
auto-dnssec(allow|maintain|off);
check-dup-records(fail|warn|ignore);
check-integrityboolean;
check-mx(fail|warn|ignore);
check-mx-cname(fail|warn|ignore);
check-names(fail|warn|ignore);
check-siblingboolean;
check-spf(warn|ignore);
check-srv-cname(fail|warn|ignore);
check-wildcardboolean;
databasestring;
delegation-onlyboolean;
dialup(notify|notify-passive|passive|refresh|boolean);
dlzstring;
dnssec-dnskey-kskonlyboolean;
dnssec-loadkeys-intervalinteger;
dnssec-secure-to-insecureboolean;
dnssec-update-mode(maintain|no-resign);
filequoted_string;
forward(first|only);
forwarders[portinteger][dscpinteger]{(ipv4_address
|ipv6_address)[portinteger][dscpinteger];...};
in-viewstring;
inline-signingboolean;
ixfr-from-differencesboolean;
journalquoted_string;
key-directoryquoted_string;
masterfile-format(map|raw|text);
masterfile-style(full|relative);
masters[portinteger][dscpinteger]{(masters|
ipv4_address[portinteger]|ipv6_address[port
integer])[keystring];...};
max-journal-size(unlimited|sizeval);
max-recordsinteger;
max-refresh-timeinteger;
max-retry-timeinteger;
max-transfer-idle-ininteger;
max-transfer-idle-outinteger;
max-transfer-time-ininteger;
max-transfer-time-outinteger;
max-zone-ttl(unlimited|ttlval);
min-refresh-timeinteger;
min-retry-timeinteger;
multi-masterboolean;
notify(explicit|master-only|boolean);
notify-delayinteger;
notify-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
notify-source-v6(ipv6_address|*)[port(integer|*)]
[dscpinteger];
notify-to-soaboolean;
pubkeyintegerinteger
request-expireboolean;
request-ixfrboolean;
serial-update-method(date|increment|unixtime);
server-addresses{(ipv4_address|ipv6_address)[port
integer];...};
server-names{quoted_string;...};
sig-signing-nodesinteger;
sig-signing-signaturesinteger;
sig-signing-typeinteger;
sig-validity-intervalinteger[integer];
transfer-source(ipv4_address|*)[port(integer|*)][
dscpinteger];
transfer-source-v6(ipv6_address|*)[port(integer|*)
][dscpinteger];
try-tcp-refreshboolean;
type(delegation-only|forward|hint|master|redirect|slave
|static-stub|stub);
update-check-kskboolean;
update-policy(local|{(deny|grant)string(6to4-self|
external|krb5-self|krb5-subdomain|ms-self|ms-subdomain
|name|self|selfsub|selfwild|subdomain|tcp-self|
wildcard|zonesub)[string]rrtypelist;...};
use-alt-transfer-sourceboolean;
zero-no-soa-ttlboolean;
zone-statistics(full|terse|none|boolean);
};
BIND 9.11.4-P2 (Extended Support Version)