mail us  |  mail this page

contact us
training  | 
tech stuff  | 

BIND 9 Support

7. List of Statements

This section defines in summary format all the statements available in BIND 9.3.0 (updated for some 9.10.x values) named.conf. This list is in alphabetic order to make it useful. Don't you just hate it when you spend two minutes looking for something that should take two seconds. The entries enclosed in square brackets following the statement, and where present, specify the clause or clauses in which the statement may be used. Progressively we are adding the default value in bold where it is clear and unambiguous.

Bind 9 Features by Release (9.8 to 9.10)

  additional-from-auth (yes | no) ; [ Opt, View ]
  additional-from-cache (yes | no) ; [ Opt, View ]
  algorithm "algorithm_name"; [ Key ]
  allow-notify { address_match_list }; [ Opt, View, Zone ]
  allow-query { address_match_list }; [ Opt, View, Zone ]
  allow-query-on { address_match_list }; [ Opt, View, Zone ]
  allow-query-cache { address_match_list }; [ Opt, View ]
  allow-query-cache-on { address_match_list }; [ Opt, View ]
  allow-recursion { address_match_list }; [ Opt, View ]
  allow-recursion-on { address_match_list }; [ Opt, View ]
  allow-transfer { address_match_list }; [ Opt, View, Zone]
  allow-update { address_match_list }; [Opt, View, Zone]
  allow-update-forwarding { address_match_list }; [ Opt, View, Zone]
  allow-v6-synthesis { address_match_list }; Obsolete
  also-notify [port gp-num] [dscp gd-num] { (masters-list|IP-address )[port p-num] [dscp d-num] 
    [key key-name] ; [... ;] }; [ Opt, View, Zone ] [9.9+]
  also-notify { ip_addr [port ip_port] ; ... ] }; [ Opt, View, Zone ] [Pre 9.9]
  alt-transfer-source ( ipv4 | * ) [ port ( integer | * )]; [ Opt, View, Zone ]
  alt-transfer-source-v6 ( ipv6 | * ) [ port ( integer | * ) ]; [ Opt, View, Zone ]
  auth-nxdomain (yes | no); [ Opt, View ]
  avoid-v4-udp-ports { port; ... }; [ Opt ]
  avoid-v6-udp-ports { port; ... }; [ Opt ]
  blackhole { address_match_list }; [ Opt ]
  bogus ( yes | no ); [ Server ]
  cache-file DEVELOPER ONLY STATEMENT
  category category_name { channel_name; ... }; [ logging ]
  channel channel_name { channel_spec }; [ logging ]
  check-names ( master | slave | response ) ( fail | warn | ignore ); [ Opt, view ]
  check-names ( fail | warn | ignore ); [ Zone ]
  cleaning-interval number; [ Opt, View ]
  coresize size_in_bytes ; [ Opt ]
  database "database-name params"; [ Zone ]
  datasize size_spec ; [ Opt ]
  deallocate-on-exit yes_or_no; IGNORED - DEFAULT BEHAVIOUR IN BIND 9
  delegation-only ( yes | no ) ; [ Zone ]
  deny-answer-addresses { address_match_list } 
    [ except-from { name_list } ]; [ Opt ]
  deny-answer-aliases { name_list } 
    [ except-from { name_list } ]; [ Opt ]
  dialup dialup_options; [ Opt, View, Zone ]
  directory path_name; [ Opt ]
  disable-algorithms domain { algorithm ; ... }; [ Opt ]
  disable-ds-digests domain { digest ; ... }; [ Opt ]
  disable-empty-zone zone_name; [ Opt, View ]
  dnssec-enable ( yes | no ); [ Opt, View ]
  dnssec-lookaside domain trust-anchor domain; [ Opt, View ]
  dnssec-must-be-secure domain ( yes | no); [ Opt, View ]
  dnssec-validation ( yes | no ); [ Opt, View ]
  dual-stack-servers [ port p_num ] { ( "id" [port p_num] | 
                ipv4 [port p_num] | ipv6 [port p_num] ); ... }; [ Opt, View ]
  dump-file path_name; [ Opt ]
  edns ( yes | no); [ server ]
  edns-udp-size size_in_bytes; [ Opt, View ]
  empty-contact name; [ Opt, View ]
  empty-server name; [ Opt, View ]
  empty-zones-enable yes | no; [ Opt, View ]
  fake-iquery yes_or_no; ] IGNORED IN BIND 9
  fetch-glue yes_or_no; ] OBSOLETE IN BIND 9
  file "file_name" ; [ Zone ]
  files number_of_files ; [ Opt, View ]
  forward ( only | first ); [ Opt, View, Zone ]
  forwarders { ipv4_addr | ipv6_addr [port ip_port] ; ... ] }; [ Opt, View, Zone ]
  has-old-clients yes | no; IGNORED IN BIND 9
  heartbeat-interval minutes; [ Opt, View ]
  host-statistics yes_or_no; NOT YET IMPLEMENTED IN BIND 9
  hostname hostname_string; ; [ Opt, View ]
  in-view view-name; [ Zone ] [Def=N/A]
  inet ( ip_addr | * ) [ port ip_port ] allow {  address_match_list  }
     keys {  key_list  }; [ controls ]
  interface-interval number; [ Opt ]
  ixfr-from-differences ( yes | no); [ Opt, View, Zone ]
  ixfr-tmp-file -- ; OBSOLETE IN BIND 9
  key-directory path_name; [ Opt, View, Zone ]
  lame-ttl number; [ Opt, View ]
  listen-on [ port ip_port ] { address_match_list }; [Opt, lwres ]
  listen-on-v6 [ port ip_port ] { address_match_list }; [ Opt ]
  maintain-ixfr-base ( yes | no ); OBSOLETE IN BIND 9
  masterfile-format (text|raw|map); [ Opt, View, Zone ]
  masters [port pg-port] [dscp d-num] { 
   (masters-list|ip-addr) [port p-port] [dscp d-num] [key key-name] ) ; [...] } ; ] [ Zone ]
  match-clients { address_match_list } ; [ View ]
  match-destinations { address_match_list } ; [ View ]
  match-mapped-addresses ( yes | no ); [ Opt ]
  match-recursive-only { address_match_list } ; [ View ]
  max-cache-size size_in_bytes ; [ Opt, View ]
  max-cache-ttl seconds; [ Opt, View ]
  max-ixfr-log-size number;  OBSOLETE IN BIND 9
  max-journal-size size_in_bytes; [ Opt, View, Zone ]
  max-ncache-ttl seconds; [ Opt, View ]
  max-refresh-time seconds ; [ Opt, View, Zone ]
  max-retry-time seconds ; [ Opt, View, Zone ]
  max-rsa-exponent-size bits; [ Opt ]
  max-transfer-idle-in minutes; [ Opt, View, Zone ]
  max-transfer-idle-out minutes; [ Opt, View, Zone ]
  max-transfer-time-in minutes; [ Opt, View, Zone ]
  max-transfer-time-out minutes; [ Opt, View, Zone ]
  memstatistics-file "path_name"; [ Opt ]
  min-refresh-time seconds ; [ Opt, View, Zone ]
  min-retry-time seconds ; [ Opt, View, Zone ]
  min-roots number; NOT YET IMPLEMENTED IN BIND 9
  minimal-responses ( yes | no ) ; [ Opt, View ]
  multi-master ( yes | no ) ; [ Opt, View, Zone ]
  multiple-cnames (yes | no); IGNORED BY BIND 9
  named-xfer path_name; OBSOLETE IN BIND 9
  ndots number ; [ lwres ]
  notify ( yes | no | explicit ); [ Opt, View, Zone ]
  notify-source (ip4_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  notify-source-v6 (ip6_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  pid-file "path_to_file"; [ Opt ]
  port ip_port; [ Opt ]
  preferred-glue ( A | AAAA) ; [ Opt, View ]
  prefetch expiry-ttl-seconds [threshold-ttl-secs] ; [ Opt ]
  provide-ixfr ( yes | no) ; [ Opt, View, server ]
  pubkey ; OBSOLETE IN BIND 9
  query-source [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ]; [ Opt, View ]
  query-source-v6 [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ]; [ Opt, View ]
  querylog ( yes | no ); [ Opt ]
  random-device "device_name" ; [ Opt ]
  rate-limit {  
     [ domain domain ; ]
     [ responses-per-second [size number] [ratio fixedpoint] number ; ]
     [ referrals-per-second number ; ]
     [ nodata-per-second number ; ]
     [ nxdomains-per-second number ; ]
     [ errors-per-second number ; ]
     [ all-per-second number ; ]
     [ window number ; ]
     [ log-only yes_or_no ; ]
     [ qps-scale number ; ]
     [ ipv4-prefix-length number ; ]
     [ ipv6-prefix-length number ; ]
     [ slip number ; ]
     [ exempt-clients { address_match_list } ; ]
     [ max-table-size number ; ]
     [ min-table-size number ; ] 
     }; [ opt, View ]
  recursing-file "path_to_file"; [ Opt ]
  recursion ( yes | no ); [ Opt, View ]
  recursive-clients number; [ Opt ]
  request-ixfr ( yes | no ); [ Opt, View, server ]
  resolver-query-timeout seconds ; [ Opt ]
  response-policy { zone zone-name 
     [ policy (given|disabled|passthru|drop|nxdomain|nodata|tcp-only| cname domain-name)
     [ recursive-only yes_or_no ] [ max-policy-ttl number ] ; } 
     [ recursive-only yes_or_no ] 
     [ max-policy-ttl number ]
     [ break-dnssec yes_or_no ]
     [ min-ns-dots number ]
     [ qname-wait-recurse yes_or_no ] ; [ opt, View ]
  rfc2308-type1 ( yes | no ); NOT YET IMPLEMENTED IN BIND 9
  root-delegation-only [ exclude { namelist } ] ; [ Opt, View ]
  rrset-order { order_spec ; [ order_spec ; ... ] ); [ Opt, View ]
  search { domain_name ; [ domain_name ; ... ] }; [ lwres ]
  secret secret_string ; [ key ]
  serial-queries number; NOT IMPLEMENTED IN BIND 9
  serial-query-rate number; [ Opt ]
  sig-validity-interval number ; [ Opt, View, Zone ]
  server-addresses server-addresses {ip-address; [...;]}; [ Zone ] [Def=N/A]
  server-names { dom-name; [ ...; ] }; [ Zone ] [Def=N/A]
  server-id "server_id"; [ Opt ]
  sortlist { address_match_list }; [ Opt, View ]
  stacksize size_in_bytes ; [ Opt ]
  statistics-file path_name; [ Opt ]
  statistics-interval number; NOT YET IMPLEMENTED IN BIND9
  support-ixfr; OBSOLETE IN BIND9
  suppress-initial-notify NOT YET IMPLEMENTED IN BIND9
  sig-validity-interval days ; [ Opt, View, Zone ]
  tcp-clients number; [ Opt ]
  tcp-listen-queue number; [ Opt ]
  tkey-dhkey key_name key_tag; [ Opt ]
  tkey-domain domainname; [ Opt ]
  tkey-gssapi-credential domainname; [ Opt ]
  topology { address_match_list }; NOT YET IMPLEMENTED IN BIND 9
  transfer-format ( one-answer | many-answers ); [ Opt, View, server ]
  transfer-source (ip4_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  transfer-source-v6 (ip6_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  transfers number ; [ server ]
  transfers-in  number; [ Opt ]
  transfers-out number; [ Opt ]
  transfers-per-ns number; [ Opt ]
  treat-cr-as-space yes_or_no ; OBSOLETE BIND 9 READS BOTH FORMATS
  type zone_type; [ Zone ]
  unix ; NOT YET IMPLEMENTED IN BIND 9
  update-policy { update_policy_rule [...] }; [ Zone ]
  use-alt-transfer-source ( yes | no ); [ Opt, View, Zone ]
  use-v4-udp-ports [range begin end;]
  use-v6-udp-ports [range begin end;]
  use-id-pool ( yes | no ); OBSOLETE IIN BIND 9
  use-ixfr ( yes | no ) ; OBSOLETE IN BIND 9
  view view_name ; [ lwres ]
  version version_string; [ Opt ]
  zone-statistics ( yes | no ) ; [ Opt, View, Zone ]


Problems, comments, suggestions, corrections (including broken links) or something to add? Please take the time from a busy life to 'mail us' (at top of screen), the webmaster (below) or info-support at zytrax. You will have a warm inner glow for the rest of the day.

Pro DNS and BIND by Ron Aitchison

Contents

tech info
guides home
dns articles
intro
contents
1 objectives
big picture
2 concepts
3 reverse map
4 dns types
quickstart
5 install bind
6 samples
reference
7 named.conf
8 zone records
operations
9 howtos
10 tools
11 trouble
programming
12 bind api's
security
13 dns security
bits & bytes
15 messages
resources
notes & tips
registration FAQ
dns resources
dns rfcs
change log

Creative Commons License
This work is licensed under a Creative Commons License.

If you are happy it's OK - but your browser is giving a less than optimal experience on our site. You could, at no charge, upgrade to a W3C STANDARDS COMPLIANT browser such as Firefox

Search

web zytrax.com

Share

Icons made by Icomoon from www.flaticon.com is licensed by CC 3.0 BY
share page via facebook tweet this page

Page

email us Send to a friend feature print this page Display full width page Decrease font size Increase font size

Resources

Systems

FreeBSD
NetBSD
OpenBSD
DragonFlyBSD
Linux.org
Debian Linux

Software

LibreOffice
OpenOffice
Mozilla
GitHub
GNU-Free SW Foundation
get-dns

Organizations

Open Source Initiative
Creative Commons

Misc.

Ibiblio - Library
Open Book Project
Open Directory
Wikipedia

Site

CSS Technology SPF Record Conformant Domain
Copyright © 1994 - 2024 ZyTrax, Inc.
All rights reserved. Legal and Privacy
site by zytrax
hosted by javapipe.com
web-master at zytrax
Page modified: February 26 2024.