7. List of Statements

This section defines in summary format all the statements available in BIND 9.3.0 named.conf. This list is in alphabetic order to make it useful. Don't you just hate it when you spend 2 minutes looking for something that should take two seconds. The entries enclosed in square brackets following the statement, and where present, specify the clause or clauses in which the statement may be used.

  additional-from-auth (yes | no) ; [ Opt, View ]
  additional-from-cache (yes | no) ; [ Opt, View ]
  algorithm "algorithm_name"; [ Key ]
  allow-notify { address_match_list }; [ Opt, View, Zone ]
  allow-query { address_match_list }; [ Opt, View, Zone ]
  allow-recursion { address_match_list }; [ Opt, View ]
  allow-transfer { address_match_list }; [ Opt, View, Zone ]
  allow-update { address_match_list }; [ Zone ]
  allow-update-forwarding { address_match_list }; [ Opt, View, Zone ]
  allow-v6-synthesis { address_match_list }; Obsolete
  also-notify { ip_addr [port ip_port] ; ... ] }; [ Opt, View, Zone ]
  alt-transfer-source ( ipv4 | * ) [ port ( integer | * )]; [ Opt, View, Zone ]
  alt-transfer-source-v6 ( ipv6 | * ) [ port ( integer | * ) ]; [ Opt, View, Zone ]
  auth-nxdomain (yes | no); [ Opt, View ]
  avoid-v4-udp-ports { port; ... }; [ Opt ]
  avoid-v6-udp-ports { port; ... }; [ Opt ]
  blackhole { address_match_list }; [ Opt ]
  bogus ( yes | no ); [ Server ]
  cache-file DEVELOPER ONLY STATEMENT
  category category_name { channel_name; ... }; [ logging ]
  channel channel_name { channel_spec }; [ logging ]
  check-names ( master | slave | response ) ( fail | warn | ignore ); [ Opt, server ]
  check-names ( fail | warn | ignore ); [ Zone ]
  cleaning-interval number; [ Opt, View ]
  coresize size_in_bytes ; [ Opt ]
  database "database-name params"; [ Zone ]
  datasize size_spec ; [ Opt ]
  deallocate-on-exit yes_or_no; IGNORED - DEFAULT BEHAVIOUR IN BIND 9
  delegation-only ( yes | no ) ; [ Zone ]
  dialup dialup_options; [ Opt, View, Zone ]
  directory path_name; [ Opt ]
  disable-algorithms string { string; ... }; [ Opt, View ]
  dnssec-enable ( yes | no ); [ Opt, View ]
  dnssec-lookaside domain trust-anchor domain; [ Opt, View ]
  dnssec-must-be-secure domain ( yes | no); [ Opt, View ]
  dual-stack-servers [ port p_num ] { ( "id" [port p_num] | 
                ipv4 [port p_num] | ipv6 [port p_num] ); ... }; [ Opt, View ]
  dump-file path_name; [ Opt ]
  edns ( yes | no); [ server ]
  edns-udp-size size_in_bytes; [ Opt, View ]
  fake-iquery yes_or_no; ] IGNORED IN BIND 9
  fetch-glue yes_or_no; ] OBSOLETE IN BIND 9
  file "file_name" ; [ Zone ]
  files number_of_files ; [ Opt, View ]
  forward ( only | first ); [ Opt, View, Zone ]
  forwarders { ipv4_addr | ipv6_addr [port ip_port] ; ... ] }; [ Opt, View, Zone ]
  has-old-clients yes | no; IGNORED IN BIND 9
  heartbeat-interval minutes; [ Opt, View ]
  host-statistics yes_or_no; NOT YET IMPLEMENTED IN BIND 9
  hostname hostname_string; ; [ Opt, View ]
  inet ( ip_addr | * ) [ port ip_port ] allow {  address_match_list  }
                keys {  key_list  }; [ controls ]
  interface-interval number; [ Opt ]
  ixfr-from-differences ( yes | no); [ Opt, View, Zone ]
  ixfr-tmp-file -- ; OBSOLETE IN BIND 9
  key-directory path_name; [ Opt, View, Zone ]
  lame-ttl number; [ Opt, View ]
  listen-on [ port ip_port ] { address_match_list }; [Opt, lwres ]
  listen-on-v6 [ port ip_port ] { address_match_list }; [ Opt ]
  maintain-ixfr-base ( yes | no ); OBSOLETE IN BIND 9
  masters [port ip_port] { ( masters_list | ip_addr 
      [port ip_port] [key key] ) ; [...] } ; ] [ Zone ]
  match-clients { address_match_list } ; [ View ]
  match-destination { address_match_list } ; [ View ]
  match-mapped-addresses ( yes | no ); [ Opt ]
  match-recursive-only { address_match_list } ; [ View ]
  max-cache-size size_in_bytes ; [ Opt, View ]
  max-cache-ttl seconds; [ Opt, View ]
  max-ixfr-log-size number;  OBSOLETE IN BIND 9
  max-journal-size size_in_bytes; [ Opt, View, Zone ]
  max-ncache-ttl seconds; [ Opt, View ]
  max-refresh-time seconds ; [ Opt, View, Zone ]
  max-retry-time seconds ; [ Opt, View, Zone ]
  max-transfer-idle-in minutes; [ Opt, View, Zone ]
  max-transfer-idle-out minutes; [ Opt, View, Zone ]
  max-transfer-time-in minutes; [ Opt, View, Zone ]
  max-transfer-time-out minutes; [ Opt, View, Zone ]
  memstatistics-file "path_name"; [ Opt ]
  min-refresh-time seconds ; [ Opt, View, Zone ]
  min-retry-time seconds ; [ Opt, View, Zone ]
  min-roots number; NOT YET IMPLEMENTED IN BIND 9
  minimal-responses ( yes | no ) ; [ Opt, View ]
  multi-master ( yes | no ) ; [ Opt, View, Zone ]
  multiple-cnames (yes | no); IGNORED BY BIND 9
  named-xfer path_name; OBSOLETE IN BIND 9
  ndots number ; [ lwres ]
  notify ( yes | no | explicit ); [ Opt, View, Zone ]
  notify-source (ip4_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  notify-source-v6 (ip6_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  pid-file "path_to_file"; [ Opt ]
  port ip_port; [ Opt ]
  preferred-glue ( A | AAAA) ; [ Opt, View ]
  provide-ixfr ( yes | no) ; [ Opt, View, server ]
  pubkey ; OBSOLETE IN BIND 9
  query-source [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ]; [ Opt, View ]
  query-source-v6 [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ]; [ Opt, View ]
  querylog ( yes | no ); [ Opt ]
  recursing-file "path_to_file"; [ Opt ]
  random-device "device_name" ; [ Opt ]
  recursion ( yes | no ); [ Opt, View ]
  recursive-clients number; [ Opt ]
  request-ixfr ( yes | no ); [ Opt, View, server ]
  rfc2308-type1 ( yes | no ); NOT YET IMPLEMENTED IN BIND 9
  root-delegation-only [ exclude { namelist } ] ; [ Opt, View ]
  rrset-order { order_spec ; [ order_spec ; ... ] ); [ Opt, View ]
  search { domain_name ; [ domain_name ; ... ] }; [ lwres ]
  secret secret_string ; [ key ]
  serial-queries number; NOT IMPLEMENTED IN BIND 9
  serial-query-rate number; [ Opt ]
  sig-validity-interval number ; [ Opt, View, Zone ]
  server-id "server_id"; [ Opt ]
  sortlist { address_match_list }; [ Opt, View ]
  stacksize size_in_bytes ; [ Opt ]
  statistics-file path_name; [ Opt ]
  statistics-interval number; NOT YET IMPLEMENTED IN BIND9
  support-ixfr; OBSOLETE IN BIND9
  suppress-initial-notify NOT YET IMPLEMENTED IN BIND9
  sig-validity-interval days ; [ Opt, View, Zone ]
  tcp-clients number; [ Opt ]
  tcp-listen-queue number; [ Opt ]
  tkey-dhkey key_name key_tag; [ Opt ]
  tkey-domain domainname; [ Opt ]
  tkey-gssapi-credential domainname; [ Opt ]
  topology { address_match_list }; NOT YET IMPLEMENTED IN BIND 9
  transfer-format ( one-answer | many-answers ); [ Opt, View, server ]
  transfer-source (ip4_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  transfer-source-v6 (ip6_addr | *) [port ip_port] ; [ Opt, View, Zone ]
  transfers number ; [ server ]
  transfers-in  number; [ Opt ]
  transfers-out number; [ Opt ]
  transfers-per-ns number; [ Opt ]
  treat-cr-as-space yes_or_no ; OBSOLETE BIND 9 READS BOTH FORMATS
  type zone_type; [ Zone ]
  unix ; NOT YET IMPLEMENTED IN BIND 9
  update-policy { update_policy_rule [...] }; [ Zone ]
  use-alt-transfer-source ( yes | no ); [ Opt, View, Zone ]
  use-id-pool ( yes | no ); OBSOLETE IIN BIND 9
  use-ixfr ( yes | no ) ; OBSOLETE IN BIND 9
  view view_name ; [ lwres ]
  version version_string; [ Opt ]
  zone-statistics ( yes | no ) ; [ Opt, View, Zone ]

Pro DNS and BIND by Ron Aitchison

Contents

tech info
guides home
dns articles
intro
contents
1 objectives
big picture
2 concepts
3 reverse map
4 dns types
quickstart
5 install bind
6 samples
reference
7 named.conf
8 dns records
operations
9 howtos
10 tools
11 trouble
programming
12 bind api's
security
13 dns security
bits & bytes
15 messages
resources
notes & tips
registration FAQ
dns resources
dns rfc's
change log