named.conf(5) — Linux man page
named.conf is the configuration file for named. Statements are enclosed in braces and terminated with a semi-colon. Clauses in the statements are also semi-colon terminated. The usual comment styles are supported:
Unix style: # to end of line
Acl
Key
Masters
masters string [ port integer ]ipv6_address [port integer] ) [ key string ]; . >;
Server
server ( ipv4_address[/prefixlen] | ipv6_address[/prefixlen] )transfer-format ( many-answers | one-answer );
transfer-source ( ipv4_address | * )
transfer-source-v6 ( ipv6_address | * )
support-ixfr boolean; // obsolete >;
Trusted-keys
Managed-keys
Controls
unix unsupported; // not implemented >;
Logging
syslog optional_facility;
severity log_severity;
print-severity boolean;
print-category boolean;
Lwres
( ipv4_address | ipv6_address ) [ port integer ]; .
view string optional_class;
Options
directory quoted_string;
dump-file quoted_string;
heartbeat-interval integer;
host-statistics boolean; // not implemented
host-statistics-max number; // not implemented
hostname ( quoted_string | none );
interface-interval integer;
match-mapped-addresses boolean;
memstatistics-file quoted_string;
pid-file ( quoted_string | none );
recursing-file quoted_string;
reserved-sockets integer;
random-device quoted_string;
recursive-clients integer;
serial-query-rate integer;
server-id ( quoted_string | none |;
statistics-file quoted_string;
statistics-interval integer; // not yet implemented
tcp-listen-queue integer;
tkey-dhkey quoted_string integer;
tkey-gssapi-credential quoted_string;
tkey-gssapi-keytab quoted_string;
tkey-domain quoted_string;
transfers-per-ns integer;
transfers-out integer;
version ( quoted_string | none );
auth-nxdomain boolean; // default changed
minimal-responses boolean;
[ class string ] [ type string ]
[ name quoted_string ] string string; .
rfc2308-type1 boolean; // not yet implemented
additional-from-auth boolean;
additional-from-cache boolean;
query-source ( ( ipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];
query-source-v6 ( ( ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];
use-queryport-pool boolean;
queryport-pool-ports integer;
queryport-pool-updateinterval integer;
cleaning-interval integer;
resolver-query-timeout integer;
min-roots integer; // not implemented
max-ncache-ttl integer;
transfer-format ( many-answers | one-answer );
clients-per-query number;
max-clients-per-query number;
check-names ( master | slave | response )
check-mx ( fail | warn | ignore );
check-integrity boolean;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
cache-file quoted_string; // test option
suppress-initial-notify boolean; // not yet implemented
preferred-glue string;
dual-stack-servers [ port integer ]
( quoted_string [port integer] |
ipv4_address [port integer] |
ipv6_address [port integer] ); .
disable-algorithms string < string; . >;
dnssec-enable boolean;
dnssec-validation boolean;
dnssec-lookaside ( auto | no | domain trust-anchor domain );
dnssec-must-be-secure string boolean;
dnssec-accept-expired boolean;
recursive-only boolean;
empty-zones-enable boolean;
disable-empty-zone string;
ixfr-from-differences ixfrdiff;
update-check-ksk boolean;
dnssec-dnskey-kskonly boolean;
masterfile-format ( text | raw );
notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
forwarders [ port integer ]
( ipv4_address | ipv6_address ) [ port integer ]; .
max-journal-size size_no_default;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-retry-time integer;
min-retry-time integer;
max-refresh-time integer;
min-refresh-time integer;
sig-validity-interval integer;
sig-re-signing-interval integer;
sig-signing-nodes integer;
sig-signing-signatures integer;
sig-signing-type integer;
transfer-source ( ipv4_address | * )
transfer-source-v6 ( ipv6_address | * )
alt-transfer-source ( ipv4_address | * )
alt-transfer-source-v6 ( ipv6_address | * )
use-alt-transfer-source boolean;
zone-statistics boolean;
key-directory quoted_string;
managed-keys-directory quoted_string;
auto-dnssec allow|maintain|create|off;
try-tcp-refresh boolean;
zero-no-soa-ttl boolean;
zero-no-soa-ttl-cache boolean;
dnssec-secure-to-insecure boolean;
nsec3-test-zone boolean; // testing only
deallocate-on-exit boolean; // obsolete
fake-iquery boolean; // obsolete
fetch-glue boolean; // obsolete
has-old-clients boolean; // obsolete
maintain-ixfr-base boolean; // obsolete
max-ixfr-log-size size; // obsolete
multiple-cnames boolean; // obsolete
named-xfer quoted_string; // obsolete
serial-queries integer; // obsolete
treat-cr-as-space boolean; // obsolete
use-id-pool boolean; // obsolete >;
View
view string optional_classmatch-recursive-only boolean;
zone string optional_class
server ( ipv4_address[/prefixlen] | ipv6_address[/prefixlen] )
string integer integer integer quoted_string;
auth-nxdomain boolean; // default changed
minimal-responses boolean;
[ class string ] [ type string ]
[ name quoted_string ] string string; .
rfc2308-type1 boolean; // not yet implemented
additional-from-auth boolean;
additional-from-cache boolean;
query-source ( ( ipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];
query-source-v6 ( ( ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];
use-queryport-pool boolean;
queryport-pool-ports integer;
queryport-pool-updateinterval integer;
cleaning-interval integer;
resolver-query-timeout integer;
min-roots integer; // not implemented
max-ncache-ttl integer;
transfer-format ( many-answers | one-answer );
clients-per-query number;
max-clients-per-query number;
check-names ( master | slave | response )
check-mx ( fail | warn | ignore );
check-integrity boolean;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
cache-file quoted_string; // test option
suppress-initial-notify boolean; // not yet implemented
preferred-glue string;
dual-stack-servers [ port integer ]
( quoted_string [port integer] |
ipv4_address [port integer] |
ipv6_address [port integer] ); .
disable-algorithms string < string; . >;
dnssec-enable boolean;
dnssec-validation boolean;
dnssec-lookaside ( auto | no | domain trust-anchor domain );
dnssec-must-be-secure string boolean;
dnssec-accept-expired boolean;
recursive-only boolean;
empty-zones-enable boolean;
disable-empty-zone string;
ixfr-from-differences ixfrdiff;
update-check-ksk boolean;
dnssec-dnskey-kskonly boolean;
masterfile-format ( text | raw );
notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
forwarders [ port integer ]
( ipv4_address | ipv6_address ) [ port integer ]; .
max-journal-size size_no_default;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-retry-time integer;
min-retry-time integer;
max-refresh-time integer;
min-refresh-time integer;
sig-validity-interval integer;
transfer-source ( ipv4_address | * )
transfer-source-v6 ( ipv6_address | * )
alt-transfer-source ( ipv4_address | * )
alt-transfer-source-v6 ( ipv6_address | * )
use-alt-transfer-source boolean;
zone-statistics boolean;
try-tcp-refresh boolean;
key-directory quoted_string;
zero-no-soa-ttl boolean;
zero-no-soa-ttl-cache boolean;
dnssec-secure-to-insecure boolean;
fetch-glue boolean; // obsolete
maintain-ixfr-base boolean; // obsolete
max-ixfr-log-size size; // obsolete >;
Zone
zone string optional_classmasters [ port integer ]
ipv4_address [port integer] |
ipv6_address [ port integer ] ) [ key string ]; .
delegation-only boolean;
check-names ( fail | warn | ignore );
check-mx ( fail | warn | ignore );
check-integrity boolean;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
ixfr-from-differences boolean;
journal quoted_string;
zero-no-soa-ttl boolean;
dnssec-secure-to-insecure boolean;
update-policy local |
( name | subdomain | wildcard | self | selfsub | selfwild | krb5-self | ms-self | krb5-subdomain | ms-subdomain | tcp-self | zonesub | 6to4-self ) string
update-check-ksk boolean;
dnssec-dnskey-kskonly boolean;
masterfile-format ( text | raw );
notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
forwarders [ port integer ]
( ipv4_address | ipv6_address ) [ port integer ]; .
max-journal-size size_no_default;
max-transfer-time-in integer;
max-transfer-time-out integer;
max-transfer-idle-in integer;
max-transfer-idle-out integer;
max-retry-time integer;
min-retry-time integer;
max-refresh-time integer;
min-refresh-time integer;
sig-validity-interval integer;
transfer-source ( ipv4_address | * )
transfer-source-v6 ( ipv6_address | * )
alt-transfer-source ( ipv4_address | * )
alt-transfer-source-v6 ( ipv6_address | * )
use-alt-transfer-source boolean;
zone-statistics boolean;
try-tcp-refresh boolean;
key-directory quoted_string;
nsec3-test-zone boolean; // testing only
ixfr-base quoted_string; // obsolete
ixfr-tmp-file quoted_string; // obsolete
maintain-ixfr-base boolean; // obsolete
max-ixfr-log-size size; // obsolete
pubkey integer integer integer quoted_string; // obsolete >;
Files
See Also
named(8), named-checkconf(8), rndc(8), BIND 9 Administrator Reference Manual.
Copyright
Copyright © 2004-2011 Internet Systems Consortium, Inc. ("ISC")