Skip site navigation (1)Skip section navigation (2)

FreeBSD Man Pages

Man Page or Keyword Search:
Man Architecture
Apropos Keyword Search (all sections) Output format
home | help
NAMED.CONF(5)                                                    NAMED.CONF(5)

NAME
       named.conf - configuration file for named

SYNOPSIS
       named.conf

DESCRIPTION
       named.conf is the configuration file for named. Statements are enclosed
       in braces and terminated with a semi-colon. Clauses in the statements
       are also semi-colon terminated. The usual comment styles are supported:

       C style: /* */

       C++ style: // to end of line

       Unix style: # to end of line

ACL
       acl string { address_match_element; ... };

KEY
       key domain_name {
            algorithm string;
            secret string;
       };

MASTERS
       masters string [ port integer ] {
            ( masters | ipv4_address [port integer] |
            ipv6_address [port integer] ) [ key string ]; ...
       };

SERVER
       server ( ipv4_address | ipv6_address ) {
            bogus boolean;
            edns boolean;
            provide-ixfr boolean;
            request-ixfr boolean;
            keys server_key;
            transfers integer;
            transfer-format ( many-answers | one-answer );
            transfer-source ( ipv4_address | * )
                 [ port ( integer | * ) ];
            transfer-source-v6 ( ipv6_address | * )
                 [ port ( integer | * ) ];

            support-ixfr boolean; // obsolete
       };

TRUSTED-KEYS
       trusted-keys {
            domain_name flags protocol algorithm key; ...
       };

CONTROLS
       controls {
            inet ( ipv4_address | ipv6_address | * )
                 [ port ( integer | * ) ]
                 allow { address_match_element; ... }
                 [ keys { string; ... } ];
            unix unsupported; // not implemented
       };

LOGGING
       logging {
            channel string {
                 file log_file;
                 syslog optional_facility;
                 null;
                 stderr;
                 severity log_severity;
                 print-time boolean;
                 print-severity boolean;
                 print-category boolean;
            };
            category string { string; ... };
       };

LWRES
       lwres {
            listen-on [ port integer ] {
                 ( ipv4_address | ipv6_address ) [ port integer ]; ...
            };
            view string optional_class;
            search { string; ... };
            ndots integer;
       };

OPTIONS
       options {
            avoid-v4-udp-ports { port; ... };
            avoid-v6-udp-ports { port; ... };
            blackhole { address_match_element; ... };
            coresize size;
            datasize size;
            directory quoted_string;
            dump-file quoted_string;
            files size;
            heartbeat-interval integer;
            host-statistics boolean; // not implemented
            host-statistics-max number; // not implemented
            hostname ( quoted_string | none );
            interface-interval integer;
            listen-on [ port integer ] { address_match_element; ... };
            listen-on-v6 [ port integer ] { address_match_element; ... };
            match-mapped-addresses boolean;
            memstatistics-file quoted_string;
            pid-file ( quoted_string | none );
            port integer;
            querylog boolean;
            recursing-file quoted_string;
            random-device quoted_string;
            recursive-clients integer;
            serial-query-rate integer;
            server-id ( quoted_string | none |;
            stacksize size;
            statistics-file quoted_string;
            statistics-interval integer; // not yet implemented
            tcp-clients integer;
            tcp-listen-queue integer;
            tkey-dhkey quoted_string integer;
            tkey-gssapi-credential quoted_string;
            tkey-domain quoted_string;
            transfers-per-ns integer;
            transfers-in integer;
            transfers-out integer;
            use-ixfr boolean;
            version ( quoted_string | none );
            allow-recursion { address_match_element; ... };
            sortlist { address_match_element; ... };
            topology { address_match_element; ... }; // not implemented
            auth-nxdomain boolean; // default changed
            minimal-responses boolean;
            recursion boolean;
            rrset-order {
                 [ class string ] [ type string ]
                 [ name quoted_string ] string string; ...
            };
            provide-ixfr boolean;
            request-ixfr boolean;
            rfc2308-type1 boolean; // not yet implemented
            additional-from-auth boolean;
            additional-from-cache boolean;
            query-source querysource4;
            query-source-v6 querysource6;
            cleaning-interval integer;
            min-roots integer; // not implemented
            lame-ttl integer;
            max-ncache-ttl integer;
            max-cache-ttl integer;
            transfer-format ( many-answers | one-answer );
            max-cache-size size_no_default;
            check-names ( master | slave | response )
                 ( fail | warn | ignore );
            cache-file quoted_string;
            suppress-initial-notify boolean; // not yet implemented
            preferred-glue string;
            dual-stack-servers [ port integer ] {
                 ( quoted_string [port integer] |
                 ipv4_address [port integer] |
                 ipv6_address [port integer] ); ...
            }
            edns-udp-size integer;
            root-delegation-only [ exclude { quoted_string; ... } ];
            disable-algorithms string { string; ... };
            dnssec-enable boolean;
            dnssec-lookaside string trust-anchor string;
            dnssec-must-be-secure string boolean;

            dialup dialuptype;
            ixfr-from-differences ixfrdiff;

            allow-query { address_match_element; ... };
            allow-transfer { address_match_element; ... };
            allow-update-forwarding { address_match_element; ... };

            notify notifytype;
            notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
            notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
            also-notify [ port integer ] { ( ipv4_address | ipv6_address )
                 [ port integer ]; ... };
            allow-notify { address_match_element; ... };

            forward ( first | only );
            forwarders [ port integer ] {
                 ( ipv4_address | ipv6_address ) [ port integer ]; ...
            };

            max-journal-size size_no_default;
            max-transfer-time-in integer;
            max-transfer-time-out integer;
            max-transfer-idle-in integer;
            max-transfer-idle-out integer;
            max-retry-time integer;
            min-retry-time integer;
            max-refresh-time integer;
            min-refresh-time integer;
            multi-master boolean;
            sig-validity-interval integer;

            transfer-source ( ipv4_address | * )
                 [ port ( integer | * ) ];
            transfer-source-v6 ( ipv6_address | * )
                 [ port ( integer | * ) ];

            alt-transfer-source ( ipv4_address | * )
                 [ port ( integer | * ) ];
            alt-transfer-source-v6 ( ipv6_address | * )
                 [ port ( integer | * ) ];
            use-alt-transfer-source boolean;

            zone-statistics boolean;
            key-directory quoted_string;

            allow-v6-synthesis { address_match_element; ... }; // obsolete
            deallocate-on-exit boolean; // obsolete
            fake-iquery boolean; // obsolete
            fetch-glue boolean; // obsolete
            has-old-clients boolean; // obsolete
            maintain-ixfr-base boolean; // obsolete
            max-ixfr-log-size size; // obsolete
            multiple-cnames boolean; // obsolete
            named-xfer quoted_string; // obsolete
            serial-queries integer; // obsolete
            treat-cr-as-space boolean; // obsolete
            use-id-pool boolean; // obsolete
       };

VIEW
       view string optional_class {
            match-clients { address_match_element; ... };
            match-destinations { address_match_element; ... };
            match-recursive-only boolean;

            key string {
                 algorithm string;
                 secret string;
            };

            zone string optional_class {
                 ...
            };

            server ( ipv4_address | ipv6_address ) {
                 ...
            };

            trusted-keys {
                 string integer integer integer quoted_string; ...
            };

            allow-recursion { address_match_element; ... };
            sortlist { address_match_element; ... };
            topology { address_match_element; ... }; // not implemented
            auth-nxdomain boolean; // default changed
            minimal-responses boolean;
            recursion boolean;
            rrset-order {
                 [ class string ] [ type string ]
                 [ name quoted_string ] string string; ...
            };
            provide-ixfr boolean;
            request-ixfr boolean;
            rfc2308-type1 boolean; // not yet implemented
            additional-from-auth boolean;
            additional-from-cache boolean;
            query-source querysource4;
            query-source-v6 querysource6;
            cleaning-interval integer;
            min-roots integer; // not implemented
            lame-ttl integer;
            max-ncache-ttl integer;
            max-cache-ttl integer;
            transfer-format ( many-answers | one-answer );
            max-cache-size size_no_default;
            check-names ( master | slave | response )
                 ( fail | warn | ignore );
            cache-file quoted_string;
            suppress-initial-notify boolean; // not yet implemented
            preferred-glue string;
            dual-stack-servers [ port integer ] {
                 ( quoted_string [port integer] |
                 ipv4_address [port integer] |
                 ipv6_address [port integer] ); ...
            };
            edns-udp-size integer;
            root-delegation-only [ exclude { quoted_string; ... } ];
            disable-algorithms string { string; ... };
            dnssec-enable boolean;
            dnssec-lookaside string trust-anchor string;

            dnssec-must-be-secure string boolean;
            dialup dialuptype;
            ixfr-from-differences ixfrdiff;

            allow-query { address_match_element; ... };
            allow-transfer { address_match_element; ... };
            allow-update-forwarding { address_match_element; ... };

            notify notifytype;
            notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
            notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
            also-notify [ port integer ] { ( ipv4_address | ipv6_address )
                 [ port integer ]; ... };
            allow-notify { address_match_element; ... };

            forward ( first | only );
            forwarders [ port integer ] {
                 ( ipv4_address | ipv6_address ) [ port integer ]; ...
            };

            max-journal-size size_no_default;
            max-transfer-time-in integer;
            max-transfer-time-out integer;
            max-transfer-idle-in integer;
            max-transfer-idle-out integer;
            max-retry-time integer;
            min-retry-time integer;
            max-refresh-time integer;
            min-refresh-time integer;
            multi-master boolean;
            sig-validity-interval integer;

            transfer-source ( ipv4_address | * )
                 [ port ( integer | * ) ];
            transfer-source-v6 ( ipv6_address | * )
                 [ port ( integer | * ) ];

            alt-transfer-source ( ipv4_address | * )
                 [ port ( integer | * ) ];
            alt-transfer-source-v6 ( ipv6_address | * )
                 [ port ( integer | * ) ];
            use-alt-transfer-source boolean;

            zone-statistics boolean;
            key-directory quoted_string;

            allow-v6-synthesis { address_match_element; ... }; // obsolete
            fetch-glue boolean; // obsolete
            maintain-ixfr-base boolean; // obsolete
            max-ixfr-log-size size; // obsolete
       };

ZONE
       zone string optional_class {
            type ( master | slave | stub | hint |
                 forward | delegation-only );
            file quoted_string;

            masters [ port integer ] {
                 ( masters |
                 ipv4_address [port integer] |
                 ipv6_address [ port integer ] ) [ key string ]; ...
            };

            database string;
            delegation-only boolean;
            check-names ( fail | warn | ignore );
            dialup dialuptype;
            ixfr-from-differences boolean;

            allow-query { address_match_element; ... };
            allow-transfer { address_match_element; ... };
            allow-update { address_match_element; ... };
            allow-update-forwarding { address_match_element; ... };
            update-policy {
                 ( grant | deny ) string
                 ( name | subdomain | wildcard | self ) string
                 rrtypelist; ...
            };

            notify notifytype;
            notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
            notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
            also-notify [ port integer ] { ( ipv4_address | ipv6_address )
                 [ port integer ]; ... };
            allow-notify { address_match_element; ... };

            forward ( first | only );
            forwarders [ port integer ] {
                 ( ipv4_address | ipv6_address ) [ port integer ]; ...
            };

            max-journal-size size_no_default;
            max-transfer-time-in integer;
            max-transfer-time-out integer;
            max-transfer-idle-in integer;
            max-transfer-idle-out integer;
            max-retry-time integer;
            min-retry-time integer;
            max-refresh-time integer;
            min-refresh-time integer;
            multi-master boolean;
            sig-validity-interval integer;

            transfer-source ( ipv4_address | * )
                 [ port ( integer | * ) ];
            transfer-source-v6 ( ipv6_address | * )
                 [ port ( integer | * ) ];

            alt-transfer-source ( ipv4_address | * )
                 [ port ( integer | * ) ];
            alt-transfer-source-v6 ( ipv6_address | * )
                 [ port ( integer | * ) ];
            use-alt-transfer-source boolean;

            zone-statistics boolean;
            key-directory quoted_string;

            ixfr-base quoted_string; // obsolete
            ixfr-tmp-file quoted_string; // obsolete
            maintain-ixfr-base boolean; // obsolete
            max-ixfr-log-size size; // obsolete
            pubkey integer integer integer quoted_string; // obsolete
       };

FILES
       /etc/namedb/named.conf

SEE ALSO
       named(8), rndc(8), BIND 9 Adminstrators Reference Manual.

BIND9                           August 13, 2004                  NAMED.CONF(5)

NAME | SYNOPSIS | DESCRIPTION | ACL | KEY | MASTERS | SERVER | TRUSTED-KEYS | CONTROLS | LOGGING | LWRES | OPTIONS | VIEW | ZONE | FILES | SEE ALSO

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=named.conf&sektion=5&manpath=FreeBSD+6.0-RELEASE>

home | help