head	1.8;
access;
symbols
	RELENG_8_4:1.8.0.2
	RELENG_9_1_0_RELEASE:1.6.2.1
	RELENG_9_1:1.6.2.1.0.2
	RELENG_9_1_BP:1.6.2.1
	RELENG_8_3_0_RELEASE:1.3.2.1
	RELENG_8_3:1.3.2.1.0.2
	RELENG_8_3_BP:1.3.2.1
	RELENG_9_0_0_RELEASE:1.6
	RELENG_9_0:1.6.0.4
	RELENG_9_0_BP:1.6
	RELENG_9:1.6.0.2
	RELENG_9_BP:1.6
	RELENG_7_4_0_RELEASE:1.1.1.4.2.1
	RELENG_8_2_0_RELEASE:1.3
	RELENG_7_4:1.1.1.4.2.1.0.6
	RELENG_7_4_BP:1.1.1.4.2.1
	RELENG_8_2:1.3.0.8
	RELENG_8_2_BP:1.3
	RELENG_8_1_0_RELEASE:1.3
	RELENG_8_1:1.3.0.6
	RELENG_8_1_BP:1.3
	RELENG_7_3_0_RELEASE:1.1.1.4.2.1
	RELENG_7_3:1.1.1.4.2.1.0.4
	RELENG_7_3_BP:1.1.1.4.2.1
	RELENG_8_0_0_RELEASE:1.3
	RELENG_8_0:1.3.0.4
	RELENG_8_0_BP:1.3
	RELENG_8:1.3.0.2
	RELENG_8_BP:1.3
	RELENG_7_2_0_RELEASE:1.1.1.4.2.1
	RELENG_7_2:1.1.1.4.2.1.0.2
	RELENG_7_2_BP:1.1.1.4.2.1
	RELENG_7_1_0_RELEASE:1.1.1.4
	RELENG_6_4_0_RELEASE:1.1.1.2.2.2
	RELENG_7_1:1.1.1.4.0.6
	RELENG_7_1_BP:1.1.1.4
	RELENG_6_4:1.1.1.2.2.2.0.2
	RELENG_6_4_BP:1.1.1.2.2.2
	RELENG_7_0_0_RELEASE:1.1.1.4
	RELENG_6_3_0_RELEASE:1.1.1.2.2.1
	RELENG_7_0:1.1.1.4.0.4
	RELENG_7_0_BP:1.1.1.4
	BIND_9_4_2:1.1.1.4
	RELENG_6_3:1.1.1.2.2.1.0.6
	RELENG_6_3_BP:1.1.1.2.2.1
	RELENG_7:1.1.1.4.0.2
	RELENG_7_BP:1.1.1.4
	BIND_9_4_1_P1:1.1.1.4
	BIND_9_4_1:1.1.1.4
	BIND_9_3_4:1.1.1.3
	RELENG_6_2_0_RELEASE:1.1.1.2.2.1
	BIND_9_3_3:1.1.1.3
	RELENG_6_2:1.1.1.2.2.1.0.4
	RELENG_6_2_BP:1.1.1.2.2.1
	RELENG_5_5_0_RELEASE:1.1.1.1.2.3
	RELENG_5_5:1.1.1.1.2.3.0.2
	RELENG_5_5_BP:1.1.1.1.2.3
	RELENG_6_1_0_RELEASE:1.1.1.2.2.1
	RELENG_6_1:1.1.1.2.2.1.0.2
	RELENG_6_1_BP:1.1.1.2.2.1
	BIND_9_3_2:1.1.1.3
	RELENG_6_0_0_RELEASE:1.1.1.2
	RELENG_6_0:1.1.1.2.0.4
	RELENG_6_0_BP:1.1.1.2
	RELENG_6:1.1.1.2.0.2
	RELENG_6_BP:1.1.1.2
	RELENG_5_4_0_RELEASE:1.1.1.1.2.2
	RELENG_5_4:1.1.1.1.2.2.0.2
	RELENG_5_4_BP:1.1.1.1.2.2
	BIND_9_3_1:1.1.1.2
	RELENG_5_3_0_RELEASE:1.1.1.1.2.1
	RELENG_5_3:1.1.1.1.2.1.0.2
	RELENG_5_3_BP:1.1.1.1.2.1
	RELENG_5:1.1.1.1.0.2
	BIND_9_3_0:1.1.1.1
	BIND_9_3_0_RC4:1.1.1.1
	ISC:1.1.1;
locks; strict;
comment	@# @;


1.8
date	2012.12.07.12.43.13;	author svnexp;	state Exp;
branches
	1.8.2.1;
next	1.7;

1.7
date	2012.04.05.04.29.35;	author dougb;	state Exp;
branches;
next	1.6;

1.6
date	2011.09.03.07.13.45;	author dougb;	state Exp;
branches
	1.6.2.1;
next	1.5;

1.5
date	2011.07.16.11.12.09;	author dougb;	state Exp;
branches;
next	1.4;

1.4
date	2011.02.06.22.46.07;	author dougb;	state Exp;
branches;
next	1.3;

1.3
date	2009.05.31.05.42.58;	author dougb;	state Exp;
branches
	1.3.2.1;
next	1.2;

1.2
date	2008.12.23.22.47.56;	author dougb;	state Exp;
branches;
next	1.1;

1.1
date	2004.09.19.01.30.08;	author trhodes;	state Exp;
branches
	1.1.1.1;
next	;

1.8.2.1
date	2012.12.07.12.43.13;	author svnexp;	state dead;
branches;
next	1.8.2.2;

1.8.2.2
date	2013.03.28.13.00.21;	author svnexp;	state Exp;
branches;
next	;

1.6.2.1
date	2012.04.08.01.43.41;	author dougb;	state Exp;
branches;
next	1.6.2.2;

1.6.2.2
date	2013.01.08.10.02.28;	author svnexp;	state Exp;
branches;
next	1.6.2.3;

1.6.2.3
date	2013.08.16.08.01.50;	author svnexp;	state Exp;
branches;
next	1.6.2.4;

1.6.2.4
date	2013.08.26.08.01.49;	author svnexp;	state Exp;
branches;
next	1.6.2.5;

1.6.2.5
date	2014.03.03.10.08.04;	author svnexp;	state Exp;
branches;
next	;

1.3.2.1
date	2011.02.05.19.13.34;	author dougb;	state Exp;
branches;
next	1.3.2.2;

1.3.2.2
date	2013.02.11.12.33.25;	author svnexp;	state Exp;
branches;
next	1.3.2.3;

1.3.2.3
date	2014.03.03.10.23.39;	author svnexp;	state Exp;
branches;
next	;

1.1.1.1
date	2004.09.19.01.30.08;	author trhodes;	state Exp;
branches
	1.1.1.1.2.1;
next	1.1.1.2;

1.1.1.2
date	2005.03.17.08.02.46;	author dougb;	state Exp;
branches
	1.1.1.2.2.1;
next	1.1.1.3;

1.1.1.3
date	2005.12.29.04.22.14;	author dougb;	state Exp;
branches;
next	1.1.1.4;

1.1.1.4
date	2007.06.02.23.21.18;	author dougb;	state Exp;
branches
	1.1.1.4.2.1;
next	;

1.1.1.1.2.1
date	2004.09.26.03.09.39;	author des;	state Exp;
branches;
next	1.1.1.1.2.2;

1.1.1.1.2.2
date	2005.03.23.18.16.26;	author dougb;	state Exp;
branches;
next	1.1.1.1.2.3;

1.1.1.1.2.3
date	2006.01.14.10.42.04;	author dougb;	state Exp;
branches;
next	;

1.1.1.2.2.1
date	2006.01.14.10.13.41;	author dougb;	state Exp;
branches;
next	1.1.1.2.2.2;

1.1.1.2.2.2
date	2008.06.03.05.38.10;	author dougb;	state Exp;
branches;
next	1.1.1.2.2.3;

1.1.1.2.2.3
date	2009.01.10.04.30.27;	author dougb;	state Exp;
branches;
next	;

1.1.1.4.2.1
date	2009.01.10.03.00.21;	author dougb;	state Exp;
branches;
next	;


desc
@@


1.8
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/243981
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@
This is a summary of the named.conf options supported by 
this version of BIND 9.

acl <string> { <address_match_element>; ... };

controls {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] allow { <address_match_element>; ... } [ keys { <string>;
            ... } ];
        unix <quoted_string> perm <integer> owner <integer> group <integer>
            [ keys { <string>; ... } ];
};

dlz <string> {
        database <string>;
};

key <string> {
        algorithm <string>;
        secret <string>;
};

logging {
        category <string> { <string>; ... };
        channel <string> {
                file <quoted_string> [ versions ( "unlimited" | <integer> )
                    ] [ size <size> ];
                null;
                print-category <boolean>;
                print-severity <boolean>;
                print-time <boolean>;
                severity <log_severity>;
                stderr;
                syslog <optional_facility>;
        };
};

lwres {
        listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ndots <integer>;
        search { <string>; ... };
        view <string> <optional_class>;
};

managed-keys { <string> <string> <integer> <integer> <integer>
    <quoted_string>; ... };

masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port
    <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };

options {
        acache-cleaning-interval <integer>;
        acache-enable <boolean>;
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        allow-new-zones <boolean>;
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-query-cache { <address_match_element>; ... };
        allow-query-cache-on { <address_match_element>; ... };
        allow-query-on { <address_match_element>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-recursion-on { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        attach-cache <string>;
        auth-nxdomain <boolean>; // default changed
        auto-dnssec ( allow | maintain | off );
        avoid-v4-udp-ports { <portrange>; ... };
        avoid-v6-udp-ports { <portrange>; ... };
        bindkeys-file <quoted_string>;
        blackhole { <address_match_element>; ... };
        cache-file <quoted_string>;
        check-dup-records ( fail | warn | ignore );
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-names ( master | slave | response ) ( fail | warn | ignore );
        check-sibling <boolean>;
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        cleaning-interval <integer>;
        clients-per-query <integer>;
        coresize <size>;
        datasize <size>;
        deallocate-on-exit <boolean>; // obsolete
        deny-answer-addresses { <address_match_element>; ... } [
            except-from { <quoted_string>; ... } ];
        deny-answer-aliases { <quoted_string>; ... } [ except-from {
            <quoted_string>; ... } ];
        dialup <dialuptype>;
        directory <quoted_string>;
        disable-algorithms <string> { <string>; ... };
        disable-empty-zone <string>;
        dns64 <netprefix> {
                break-dnssec <boolean>;
                clients { <address_match_element>; ... };
                exclude { <address_match_element>; ... };
                mapped { <address_match_element>; ... };
                recursive-only <boolean>;
                suffix <ipv6_address>;
        };
        dns64-contact <string>;
        dns64-server <string>;
        dnssec-accept-expired <boolean>;
        dnssec-dnskey-kskonly <boolean>;
        dnssec-enable <boolean>;
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
        dnssec-must-be-secure <string> <boolean>;
        dnssec-secure-to-insecure <boolean>;
        dnssec-validation ( yes | no | auto );
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
        dump-file <quoted_string>;
        edns-udp-size <integer>;
        empty-contact <string>;
        empty-server <string>;
        empty-zones-enable <boolean>;
        fake-iquery <boolean>; // obsolete
        fetch-glue <boolean>; // obsolete
        files <size>;
        filter-aaaa { <address_match_element>; ... }; // not configured
        filter-aaaa-on-v4 <v4_aaaa>; // not configured
        flush-zones-on-shutdown <boolean>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        has-old-clients <boolean>; // obsolete
        heartbeat-interval <integer>;
        host-statistics <boolean>; // not implemented
        host-statistics-max <integer>; // not implemented
        hostname ( <quoted_string> | none );
        interface-interval <integer>;
        ixfr-from-differences <ixfrdiff>;
        key-directory <quoted_string>;
        lame-ttl <integer>;
        listen-on [ port <integer> ] { <address_match_element>; ... };
        listen-on-v6 [ port <integer> ] { <address_match_element>; ... };
        maintain-ixfr-base <boolean>; // obsolete
        managed-keys-directory <quoted_string>;
        masterfile-format ( text | raw );
        match-mapped-addresses <boolean>;
        max-acache-size <size_no_default>;
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
        max-clients-per-query <integer>;
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-udp-size <integer>;
        memstatistics <boolean>;
        memstatistics-file <quoted_string>;
        min-refresh-time <integer>;
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
        multi-master <boolean>;
        multiple-cnames <boolean>; // obsolete
        named-xfer <quoted_string>; // obsolete
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        notify-to-soa <boolean>;
        nsec3-test-zone <boolean>; // test only
        pid-file ( <quoted_string> | none );
        port <integer>;
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        querylog <boolean>;
        queryport-pool-ports <integer>; // obsolete
        queryport-pool-updateinterval <integer>; // obsolete
        random-device <quoted_string>;
        recursing-file <quoted_string>;
        recursion <boolean>;
        recursive-clients <integer>;
        request-ixfr <boolean>;
        request-nsid <boolean>;
        reserved-sockets <integer>;
        resolver-query-timeout <integer>;
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
        secroots-file <quoted_string>;
        serial-queries <integer>; // obsolete
        serial-query-rate <integer>;
        server-id ( <quoted_string> | none | hostname );
        session-keyalg <string>;
        session-keyfile ( <quoted_string> | none );
        session-keyname <string>;
        sig-signing-nodes <integer>;
        sig-signing-signatures <integer>;
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ];
        sortlist { <address_match_element>; ... };
        stacksize <size>;
        statistics-file <quoted_string>;
        statistics-interval <integer>; // not yet implemented
        suppress-initial-notify <boolean>; // not yet implemented
        tcp-clients <integer>;
        tcp-listen-queue <integer>;
        tkey-dhkey <quoted_string> <integer>;
        tkey-domain <quoted_string>;
        tkey-gssapi-credential <quoted_string>;
        tkey-gssapi-keytab <quoted_string>;
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        transfers-in <integer>;
        transfers-out <integer>;
        transfers-per-ns <integer>;
        treat-cr-as-space <boolean>; // obsolete
        try-tcp-refresh <boolean>;
        update-check-ksk <boolean>;
        use-alt-transfer-source <boolean>;
        use-id-pool <boolean>; // obsolete
        use-ixfr <boolean>;
        use-queryport-pool <boolean>; // obsolete
        use-v4-udp-ports { <portrange>; ... };
        use-v6-udp-ports { <portrange>; ... };
        version ( <quoted_string> | none );
        zero-no-soa-ttl <boolean>;
        zero-no-soa-ttl-cache <boolean>;
        zone-statistics <boolean>;
};

server <netprefix> {
        bogus <boolean>;
        edns <boolean>;
        edns-udp-size <integer>;
        keys <server_key>;
        max-udp-size <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        request-ixfr <boolean>;
        support-ixfr <boolean>; // obsolete
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        transfers <integer>;
};

statistics-channels {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] [ allow { <address_match_element>; ... } ];
};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

view <string> <optional_class> {
        acache-cleaning-interval <integer>;
        acache-enable <boolean>;
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        allow-new-zones <boolean>;
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-query-cache { <address_match_element>; ... };
        allow-query-cache-on { <address_match_element>; ... };
        allow-query-on { <address_match_element>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-recursion-on { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        attach-cache <string>;
        auth-nxdomain <boolean>; // default changed
        auto-dnssec ( allow | maintain | off );
        cache-file <quoted_string>;
        check-dup-records ( fail | warn | ignore );
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-names ( master | slave | response ) ( fail | warn | ignore );
        check-sibling <boolean>;
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        cleaning-interval <integer>;
        clients-per-query <integer>;
        database <string>;
        deny-answer-addresses { <address_match_element>; ... } [
            except-from { <quoted_string>; ... } ];
        deny-answer-aliases { <quoted_string>; ... } [ except-from {
            <quoted_string>; ... } ];
        dialup <dialuptype>;
        disable-algorithms <string> { <string>; ... };
        disable-empty-zone <string>;
        dlz <string> {
                database <string>;
        };
        dns64 <netprefix> {
                break-dnssec <boolean>;
                clients { <address_match_element>; ... };
                exclude { <address_match_element>; ... };
                mapped { <address_match_element>; ... };
                recursive-only <boolean>;
                suffix <ipv6_address>;
        };
        dns64-contact <string>;
        dns64-server <string>;
        dnssec-accept-expired <boolean>;
        dnssec-dnskey-kskonly <boolean>;
        dnssec-enable <boolean>;
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
        dnssec-must-be-secure <string> <boolean>;
        dnssec-secure-to-insecure <boolean>;
        dnssec-validation ( yes | no | auto );
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
        edns-udp-size <integer>;
        empty-contact <string>;
        empty-server <string>;
        empty-zones-enable <boolean>;
        fetch-glue <boolean>; // obsolete
        filter-aaaa { <address_match_element>; ... }; // not configured
        filter-aaaa-on-v4 <v4_aaaa>; // not configured
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ixfr-from-differences <ixfrdiff>;
        key <string> {
                algorithm <string>;
                secret <string>;
        };
        key-directory <quoted_string>;
        lame-ttl <integer>;
        maintain-ixfr-base <boolean>; // obsolete
        managed-keys { <string> <string> <integer> <integer> <integer>
            <quoted_string>; ... };
        masterfile-format ( text | raw );
        match-clients { <address_match_element>; ... };
        match-destinations { <address_match_element>; ... };
        match-recursive-only <boolean>;
        max-acache-size <size_no_default>;
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
        max-clients-per-query <integer>;
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-udp-size <integer>;
        min-refresh-time <integer>;
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
        multi-master <boolean>;
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        notify-to-soa <boolean>;
        nsec3-test-zone <boolean>; // test only
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        queryport-pool-ports <integer>; // obsolete
        queryport-pool-updateinterval <integer>; // obsolete
        recursion <boolean>;
        request-ixfr <boolean>;
        request-nsid <boolean>;
        resolver-query-timeout <integer>;
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
        server <netprefix> {
                bogus <boolean>;
                edns <boolean>;
                edns-udp-size <integer>;
                keys <server_key>;
                max-udp-size <integer>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                provide-ixfr <boolean>;
                query-source <querysource4>;
                query-source-v6 <querysource6>;
                request-ixfr <boolean>;
                support-ixfr <boolean>; // obsolete
                transfer-format ( many-answers | one-answer );
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                transfers <integer>;
        };
        sig-signing-nodes <integer>;
        sig-signing-signatures <integer>;
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ];
        sortlist { <address_match_element>; ... };
        suppress-initial-notify <boolean>; // not yet implemented
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        trusted-keys { <string> <integer> <integer> <integer>
            <quoted_string>; ... };
        try-tcp-refresh <boolean>;
        update-check-ksk <boolean>;
        use-alt-transfer-source <boolean>;
        use-queryport-pool <boolean>; // obsolete
        zero-no-soa-ttl <boolean>;
        zero-no-soa-ttl-cache <boolean>;
        zone <string> <optional_class> {
                allow-notify { <address_match_element>; ... };
                allow-query { <address_match_element>; ... };
                allow-query-on { <address_match_element>; ... };
                allow-transfer { <address_match_element>; ... };
                allow-update { <address_match_element>; ... };
                allow-update-forwarding { <address_match_element>; ... };
                also-notify [ port <integer> ] { ( <ipv4_address> |
                    <ipv6_address> ) [ port <integer> ]; ... };
                alt-transfer-source ( <ipv4_address> | * ) [ port (
                    <integer> | * ) ];
                alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                auto-dnssec ( allow | maintain | off );
                check-dup-records ( fail | warn | ignore );
                check-integrity <boolean>;
                check-mx ( fail | warn | ignore );
                check-mx-cname ( fail | warn | ignore );
                check-names ( fail | warn | ignore );
                check-sibling <boolean>;
                check-srv-cname ( fail | warn | ignore );
                check-wildcard <boolean>;
                database <string>;
                delegation-only <boolean>;
                dialup <dialuptype>;
                dnssec-dnskey-kskonly <boolean>;
                dnssec-secure-to-insecure <boolean>;
                file <quoted_string>;
                forward ( first | only );
                forwarders [ port <integer> ] { ( <ipv4_address> |
                    <ipv6_address> ) [ port <integer> ]; ... };
                ixfr-base <quoted_string>; // obsolete
                ixfr-from-differences <boolean>;
                ixfr-tmp-file <quoted_string>; // obsolete
                journal <quoted_string>;
                key-directory <quoted_string>;
                maintain-ixfr-base <boolean>; // obsolete
                masterfile-format ( text | raw );
                masters [ port <integer> ] { ( <masters> | <ipv4_address> [
                    port <integer> ] | <ipv6_address> [ port <integer> ] )
                    [ key <string> ]; ... };
                max-ixfr-log-size <size>; // obsolete
                max-journal-size <size_no_default>;
                max-refresh-time <integer>;
                max-retry-time <integer>;
                max-transfer-idle-in <integer>;
                max-transfer-idle-out <integer>;
                max-transfer-time-in <integer>;
                max-transfer-time-out <integer>;
                min-refresh-time <integer>;
                min-retry-time <integer>;
                multi-master <boolean>;
                notify <notifytype>;
                notify-delay <integer>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                notify-to-soa <boolean>;
                nsec3-test-zone <boolean>; // test only
                pubkey <integer> <integer> <integer>
                    <quoted_string>; // obsolete
                server-addresses { ( <ipv4_address> | <ipv6_address> ) [
                    port <integer> ]; ... };
                server-names { <quoted_string>; ... };
                sig-signing-nodes <integer>;
                sig-signing-signatures <integer>;
                sig-signing-type <integer>;
                sig-validity-interval <integer> [ <integer> ];
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                try-tcp-refresh <boolean>;
                type ( master | slave | stub | static-stub | hint | forward
                    | delegation-only );
                update-check-ksk <boolean>;
                update-policy ( local | { ( grant | deny ) <string> ( name
                    | subdomain | wildcard | self | selfsub | selfwild |
                    krb5-self | ms-self | krb5-subdomain | ms-subdomain |
                    tcp-self | 6to4-self | zonesub | external ) [ <string>
                    ] <rrtypelist>; ... };
                use-alt-transfer-source <boolean>;
                zero-no-soa-ttl <boolean>;
                zone-statistics <boolean>;
        };
        zone-statistics <boolean>;
};

zone <string> <optional_class> {
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-query-on { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        auto-dnssec ( allow | maintain | off );
        check-dup-records ( fail | warn | ignore );
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-names ( fail | warn | ignore );
        check-sibling <boolean>;
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        database <string>;
        delegation-only <boolean>;
        dialup <dialuptype>;
        dnssec-dnskey-kskonly <boolean>;
        dnssec-secure-to-insecure <boolean>;
        file <quoted_string>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ixfr-base <quoted_string>; // obsolete
        ixfr-from-differences <boolean>;
        ixfr-tmp-file <quoted_string>; // obsolete
        journal <quoted_string>;
        key-directory <quoted_string>;
        maintain-ixfr-base <boolean>; // obsolete
        masterfile-format ( text | raw );
        masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port
            <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
            <string> ]; ... };
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        min-refresh-time <integer>;
        min-retry-time <integer>;
        multi-master <boolean>;
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        notify-to-soa <boolean>;
        nsec3-test-zone <boolean>; // test only
        pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
        server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port
            <integer> ]; ... };
        server-names { <quoted_string>; ... };
        sig-signing-nodes <integer>;
        sig-signing-signatures <integer>;
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ];
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        try-tcp-refresh <boolean>;
        type ( master | slave | stub | static-stub | hint | forward |
            delegation-only );
        update-check-ksk <boolean>;
        update-policy ( local | { ( grant | deny ) <string> ( name |
            subdomain | wildcard | self | selfsub | selfwild | krb5-self |
            ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self
            | zonesub | external ) [ <string> ] <rrtypelist>; ... };
        use-alt-transfer-source <boolean>;
        zero-no-soa-ttl <boolean>;
        zone-statistics <boolean>;
};

@


1.8.2.1
log
@file options was added on branch RELENG_8_4 on 2013-03-28 13:00:21 +0000
@
text
@d1 621
@


1.8.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 621

This is a summary of the named.conf options supported by 
this version of BIND 9.

acl <string> { <address_match_element>; ... };

controls {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] allow { <address_match_element>; ... } [ keys { <string>;
            ... } ];
        unix <quoted_string> perm <integer> owner <integer> group <integer>
            [ keys { <string>; ... } ];
};

dlz <string> {
        database <string>;
};

key <string> {
        algorithm <string>;
        secret <string>;
};

logging {
        category <string> { <string>; ... };
        channel <string> {
                file <quoted_string> [ versions ( "unlimited" | <integer> )
                    ] [ size <size> ];
                null;
                print-category <boolean>;
                print-severity <boolean>;
                print-time <boolean>;
                severity <log_severity>;
                stderr;
                syslog <optional_facility>;
        };
};

lwres {
        listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ndots <integer>;
        search { <string>; ... };
        view <string> <optional_class>;
};

managed-keys { <string> <string> <integer> <integer> <integer>
    <quoted_string>; ... };

masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port
    <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };

options {
        acache-cleaning-interval <integer>;
        acache-enable <boolean>;
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        allow-new-zones <boolean>;
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-query-cache { <address_match_element>; ... };
        allow-query-cache-on { <address_match_element>; ... };
        allow-query-on { <address_match_element>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-recursion-on { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        attach-cache <string>;
        auth-nxdomain <boolean>; // default changed
        auto-dnssec ( allow | maintain | off );
        avoid-v4-udp-ports { <portrange>; ... };
        avoid-v6-udp-ports { <portrange>; ... };
        bindkeys-file <quoted_string>;
        blackhole { <address_match_element>; ... };
        cache-file <quoted_string>;
        check-dup-records ( fail | warn | ignore );
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-names ( master | slave | response ) ( fail | warn | ignore );
        check-sibling <boolean>;
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        cleaning-interval <integer>;
        clients-per-query <integer>;
        coresize <size>;
        datasize <size>;
        deallocate-on-exit <boolean>; // obsolete
        deny-answer-addresses { <address_match_element>; ... } [
            except-from { <quoted_string>; ... } ];
        deny-answer-aliases { <quoted_string>; ... } [ except-from {
            <quoted_string>; ... } ];
        dialup <dialuptype>;
        directory <quoted_string>;
        disable-algorithms <string> { <string>; ... };
        disable-empty-zone <string>;
        dns64 <netprefix> {
                break-dnssec <boolean>;
                clients { <address_match_element>; ... };
                exclude { <address_match_element>; ... };
                mapped { <address_match_element>; ... };
                recursive-only <boolean>;
                suffix <ipv6_address>;
        };
        dns64-contact <string>;
        dns64-server <string>;
        dnssec-accept-expired <boolean>;
        dnssec-dnskey-kskonly <boolean>;
        dnssec-enable <boolean>;
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
        dnssec-must-be-secure <string> <boolean>;
        dnssec-secure-to-insecure <boolean>;
        dnssec-validation ( yes | no | auto );
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
        dump-file <quoted_string>;
        edns-udp-size <integer>;
        empty-contact <string>;
        empty-server <string>;
        empty-zones-enable <boolean>;
        fake-iquery <boolean>; // obsolete
        fetch-glue <boolean>; // obsolete
        files <size>;
        filter-aaaa { <address_match_element>; ... }; // not configured
        filter-aaaa-on-v4 <v4_aaaa>; // not configured
        flush-zones-on-shutdown <boolean>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        has-old-clients <boolean>; // obsolete
        heartbeat-interval <integer>;
        host-statistics <boolean>; // not implemented
        host-statistics-max <integer>; // not implemented
        hostname ( <quoted_string> | none );
        interface-interval <integer>;
        ixfr-from-differences <ixfrdiff>;
        key-directory <quoted_string>;
        lame-ttl <integer>;
        listen-on [ port <integer> ] { <address_match_element>; ... };
        listen-on-v6 [ port <integer> ] { <address_match_element>; ... };
        maintain-ixfr-base <boolean>; // obsolete
        managed-keys-directory <quoted_string>;
        masterfile-format ( text | raw );
        match-mapped-addresses <boolean>;
        max-acache-size <size_no_default>;
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
        max-clients-per-query <integer>;
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-udp-size <integer>;
        memstatistics <boolean>;
        memstatistics-file <quoted_string>;
        min-refresh-time <integer>;
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
        multi-master <boolean>;
        multiple-cnames <boolean>; // obsolete
        named-xfer <quoted_string>; // obsolete
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        notify-to-soa <boolean>;
        nsec3-test-zone <boolean>; // test only
        pid-file ( <quoted_string> | none );
        port <integer>;
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        querylog <boolean>;
        queryport-pool-ports <integer>; // obsolete
        queryport-pool-updateinterval <integer>; // obsolete
        random-device <quoted_string>;
        recursing-file <quoted_string>;
        recursion <boolean>;
        recursive-clients <integer>;
        request-ixfr <boolean>;
        request-nsid <boolean>;
        reserved-sockets <integer>;
        resolver-query-timeout <integer>;
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
        secroots-file <quoted_string>;
        serial-queries <integer>; // obsolete
        serial-query-rate <integer>;
        server-id ( <quoted_string> | none | hostname );
        session-keyalg <string>;
        session-keyfile ( <quoted_string> | none );
        session-keyname <string>;
        sig-signing-nodes <integer>;
        sig-signing-signatures <integer>;
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ];
        sortlist { <address_match_element>; ... };
        stacksize <size>;
        statistics-file <quoted_string>;
        statistics-interval <integer>; // not yet implemented
        suppress-initial-notify <boolean>; // not yet implemented
        tcp-clients <integer>;
        tcp-listen-queue <integer>;
        tkey-dhkey <quoted_string> <integer>;
        tkey-domain <quoted_string>;
        tkey-gssapi-credential <quoted_string>;
        tkey-gssapi-keytab <quoted_string>;
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        transfers-in <integer>;
        transfers-out <integer>;
        transfers-per-ns <integer>;
        treat-cr-as-space <boolean>; // obsolete
        try-tcp-refresh <boolean>;
        update-check-ksk <boolean>;
        use-alt-transfer-source <boolean>;
        use-id-pool <boolean>; // obsolete
        use-ixfr <boolean>;
        use-queryport-pool <boolean>; // obsolete
        use-v4-udp-ports { <portrange>; ... };
        use-v6-udp-ports { <portrange>; ... };
        version ( <quoted_string> | none );
        zero-no-soa-ttl <boolean>;
        zero-no-soa-ttl-cache <boolean>;
        zone-statistics <boolean>;
};

server <netprefix> {
        bogus <boolean>;
        edns <boolean>;
        edns-udp-size <integer>;
        keys <server_key>;
        max-udp-size <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        request-ixfr <boolean>;
        support-ixfr <boolean>; // obsolete
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        transfers <integer>;
};

statistics-channels {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] [ allow { <address_match_element>; ... } ];
};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

view <string> <optional_class> {
        acache-cleaning-interval <integer>;
        acache-enable <boolean>;
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        allow-new-zones <boolean>;
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-query-cache { <address_match_element>; ... };
        allow-query-cache-on { <address_match_element>; ... };
        allow-query-on { <address_match_element>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-recursion-on { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        attach-cache <string>;
        auth-nxdomain <boolean>; // default changed
        auto-dnssec ( allow | maintain | off );
        cache-file <quoted_string>;
        check-dup-records ( fail | warn | ignore );
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-names ( master | slave | response ) ( fail | warn | ignore );
        check-sibling <boolean>;
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        cleaning-interval <integer>;
        clients-per-query <integer>;
        database <string>;
        deny-answer-addresses { <address_match_element>; ... } [
            except-from { <quoted_string>; ... } ];
        deny-answer-aliases { <quoted_string>; ... } [ except-from {
            <quoted_string>; ... } ];
        dialup <dialuptype>;
        disable-algorithms <string> { <string>; ... };
        disable-empty-zone <string>;
        dlz <string> {
                database <string>;
        };
        dns64 <netprefix> {
                break-dnssec <boolean>;
                clients { <address_match_element>; ... };
                exclude { <address_match_element>; ... };
                mapped { <address_match_element>; ... };
                recursive-only <boolean>;
                suffix <ipv6_address>;
        };
        dns64-contact <string>;
        dns64-server <string>;
        dnssec-accept-expired <boolean>;
        dnssec-dnskey-kskonly <boolean>;
        dnssec-enable <boolean>;
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
        dnssec-must-be-secure <string> <boolean>;
        dnssec-secure-to-insecure <boolean>;
        dnssec-validation ( yes | no | auto );
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
        edns-udp-size <integer>;
        empty-contact <string>;
        empty-server <string>;
        empty-zones-enable <boolean>;
        fetch-glue <boolean>; // obsolete
        filter-aaaa { <address_match_element>; ... }; // not configured
        filter-aaaa-on-v4 <v4_aaaa>; // not configured
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ixfr-from-differences <ixfrdiff>;
        key <string> {
                algorithm <string>;
                secret <string>;
        };
        key-directory <quoted_string>;
        lame-ttl <integer>;
        maintain-ixfr-base <boolean>; // obsolete
        managed-keys { <string> <string> <integer> <integer> <integer>
            <quoted_string>; ... };
        masterfile-format ( text | raw );
        match-clients { <address_match_element>; ... };
        match-destinations { <address_match_element>; ... };
        match-recursive-only <boolean>;
        max-acache-size <size_no_default>;
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
        max-clients-per-query <integer>;
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-udp-size <integer>;
        min-refresh-time <integer>;
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
        multi-master <boolean>;
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        notify-to-soa <boolean>;
        nsec3-test-zone <boolean>; // test only
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        queryport-pool-ports <integer>; // obsolete
        queryport-pool-updateinterval <integer>; // obsolete
        recursion <boolean>;
        request-ixfr <boolean>;
        request-nsid <boolean>;
        resolver-query-timeout <integer>;
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
        server <netprefix> {
                bogus <boolean>;
                edns <boolean>;
                edns-udp-size <integer>;
                keys <server_key>;
                max-udp-size <integer>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                provide-ixfr <boolean>;
                query-source <querysource4>;
                query-source-v6 <querysource6>;
                request-ixfr <boolean>;
                support-ixfr <boolean>; // obsolete
                transfer-format ( many-answers | one-answer );
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                transfers <integer>;
        };
        sig-signing-nodes <integer>;
        sig-signing-signatures <integer>;
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ];
        sortlist { <address_match_element>; ... };
        suppress-initial-notify <boolean>; // not yet implemented
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        trusted-keys { <string> <integer> <integer> <integer>
            <quoted_string>; ... };
        try-tcp-refresh <boolean>;
        update-check-ksk <boolean>;
        use-alt-transfer-source <boolean>;
        use-queryport-pool <boolean>; // obsolete
        zero-no-soa-ttl <boolean>;
        zero-no-soa-ttl-cache <boolean>;
        zone <string> <optional_class> {
                allow-notify { <address_match_element>; ... };
                allow-query { <address_match_element>; ... };
                allow-query-on { <address_match_element>; ... };
                allow-transfer { <address_match_element>; ... };
                allow-update { <address_match_element>; ... };
                allow-update-forwarding { <address_match_element>; ... };
                also-notify [ port <integer> ] { ( <ipv4_address> |
                    <ipv6_address> ) [ port <integer> ]; ... };
                alt-transfer-source ( <ipv4_address> | * ) [ port (
                    <integer> | * ) ];
                alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                auto-dnssec ( allow | maintain | off );
                check-dup-records ( fail | warn | ignore );
                check-integrity <boolean>;
                check-mx ( fail | warn | ignore );
                check-mx-cname ( fail | warn | ignore );
                check-names ( fail | warn | ignore );
                check-sibling <boolean>;
                check-srv-cname ( fail | warn | ignore );
                check-wildcard <boolean>;
                database <string>;
                delegation-only <boolean>;
                dialup <dialuptype>;
                dnssec-dnskey-kskonly <boolean>;
                dnssec-secure-to-insecure <boolean>;
                file <quoted_string>;
                forward ( first | only );
                forwarders [ port <integer> ] { ( <ipv4_address> |
                    <ipv6_address> ) [ port <integer> ]; ... };
                ixfr-base <quoted_string>; // obsolete
                ixfr-from-differences <boolean>;
                ixfr-tmp-file <quoted_string>; // obsolete
                journal <quoted_string>;
                key-directory <quoted_string>;
                maintain-ixfr-base <boolean>; // obsolete
                masterfile-format ( text | raw );
                masters [ port <integer> ] { ( <masters> | <ipv4_address> [
                    port <integer> ] | <ipv6_address> [ port <integer> ] )
                    [ key <string> ]; ... };
                max-ixfr-log-size <size>; // obsolete
                max-journal-size <size_no_default>;
                max-refresh-time <integer>;
                max-retry-time <integer>;
                max-transfer-idle-in <integer>;
                max-transfer-idle-out <integer>;
                max-transfer-time-in <integer>;
                max-transfer-time-out <integer>;
                min-refresh-time <integer>;
                min-retry-time <integer>;
                multi-master <boolean>;
                notify <notifytype>;
                notify-delay <integer>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                notify-to-soa <boolean>;
                nsec3-test-zone <boolean>; // test only
                pubkey <integer> <integer> <integer>
                    <quoted_string>; // obsolete
                server-addresses { ( <ipv4_address> | <ipv6_address> ) [
                    port <integer> ]; ... };
                server-names { <quoted_string>; ... };
                sig-signing-nodes <integer>;
                sig-signing-signatures <integer>;
                sig-signing-type <integer>;
                sig-validity-interval <integer> [ <integer> ];
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                try-tcp-refresh <boolean>;
                type ( master | slave | stub | static-stub | hint | forward
                    | delegation-only );
                update-check-ksk <boolean>;
                update-policy ( local | { ( grant | deny ) <string> ( name
                    | subdomain | wildcard | self | selfsub | selfwild |
                    krb5-self | ms-self | krb5-subdomain | ms-subdomain |
                    tcp-self | 6to4-self | zonesub | external ) [ <string>
                    ] <rrtypelist>; ... };
                use-alt-transfer-source <boolean>;
                zero-no-soa-ttl <boolean>;
                zone-statistics <boolean>;
        };
        zone-statistics <boolean>;
};

zone <string> <optional_class> {
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-query-on { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        auto-dnssec ( allow | maintain | off );
        check-dup-records ( fail | warn | ignore );
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-names ( fail | warn | ignore );
        check-sibling <boolean>;
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        database <string>;
        delegation-only <boolean>;
        dialup <dialuptype>;
        dnssec-dnskey-kskonly <boolean>;
        dnssec-secure-to-insecure <boolean>;
        file <quoted_string>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ixfr-base <quoted_string>; // obsolete
        ixfr-from-differences <boolean>;
        ixfr-tmp-file <quoted_string>; // obsolete
        journal <quoted_string>;
        key-directory <quoted_string>;
        maintain-ixfr-base <boolean>; // obsolete
        masterfile-format ( text | raw );
        masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port
            <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
            <string> ]; ... };
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        min-refresh-time <integer>;
        min-retry-time <integer>;
        multi-master <boolean>;
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        notify-to-soa <boolean>;
        nsec3-test-zone <boolean>; // test only
        pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
        server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port
            <integer> ]; ... };
        server-names { <quoted_string>; ... };
        sig-signing-nodes <integer>;
        sig-signing-signatures <integer>;
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ];
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        try-tcp-refresh <boolean>;
        type ( master | slave | stub | static-stub | hint | forward |
            delegation-only );
        update-check-ksk <boolean>;
        update-policy ( local | { ( grant | deny ) <string> ( name |
            subdomain | wildcard | self | selfsub | selfwild | krb5-self |
            ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self
            | zonesub | external ) [ <string> ] <rrtypelist>; ... };
        use-alt-transfer-source <boolean>;
        zero-no-soa-ttl <boolean>;
        zone-statistics <boolean>;
};

@


1.7
log
@SVN rev 233914 on 2012-04-05 04:29:35Z by dougb

Update to version 9.8.2, the latest from ISC, which contains numerous bug fixes.
@
text
@d199 5
a203 4
        response-policy {
                zone <string> [ policy ( given | disabled | passthru |
                    no-op | nxdomain | nodata | cname <domain> ) ];
        };
d404 5
a408 4
        response-policy {
                zone <string> [ policy ( given | disabled | passthru |
                    no-op | nxdomain | nodata | cname <domain> ) ];
        };
@


1.6
log
@SVN rev 225361 on 2011-09-03 07:13:45Z by dougb

Upgrade to BIND version 9.8.1. Release notes at:

https://deepthought.isc.org/article/AA-00446/81/
or
/usr/src/contrib/bind9/

Approved by:	re (kib)
@
text
@d77 1
d117 1
a117 1
        dnssec-lookaside ( <string> trust-anchor <string> | auto );
d200 2
a201 2
                zone <string> [ policy ( given | no-op | nxdomain | nodata
                    | cname <domain> ) ];
d301 1
d337 1
a337 1
        dnssec-lookaside ( <string> trust-anchor <string> | auto );
d404 2
a405 2
                zone <string> [ policy ( given | no-op | nxdomain | nodata
                    | cname <domain> ) ];
@


1.6.2.1
log
@SVN rev 234010 on 2012-04-08 01:43:41Z by dougb

MFC r233909:

Add Bv9ARM.pdf to the list of docs to install.

MFV/MFC r233914:

Update to version 9.8.2, the latest from ISC, which contains numerous bug fixes.
@
text
@a76 1
        auto-dnssec ( allow | maintain | off );
d116 1
a116 1
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
d199 2
a200 2
                zone <string> [ policy ( given | disabled | passthru |
                    no-op | nxdomain | nodata | cname <domain> ) ];
a299 1
        auto-dnssec ( allow | maintain | off );
d335 1
a335 1
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
d402 2
a403 2
                zone <string> [ policy ( given | disabled | passthru |
                    no-op | nxdomain | nodata | cname <domain> ) ];
@


1.6.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/245163
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r245163 | erwin | 2013-01-08 09:05:09 +0000 (Tue, 08 Jan 2013) | 21 lines
## SVN ##
## SVN ## MFC r243981,243987:
## SVN ##
## SVN ##   Update to 9.8.4-P1.
## SVN ##
## SVN ##   New Features
## SVN ##
## SVN ##   *  Elliptic Curve Digital Signature Algorithm keys and signatures in
## SVN ##      DNSSEC are now supported per RFC 6605. [RT #21918]
## SVN ##
## SVN ##   Feature Changes
## SVN ##
## SVN ##   *  Improves OpenSSL error logging [RT #29932]
## SVN ##
## SVN ##   *  nslookup now returns a nonzero exit code when it is unable to get
## SVN ##      an answer.  [RT #29492]
## SVN ##
## SVN ##   Other critical bug fixes are included.
## SVN ##
## SVN ##   Approved by:  delphij (mentor)
## SVN ##   Sponsored by: DK Hostmaster A/S
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d199 4
a202 5
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
d403 4
a406 5
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
@


1.6.2.3
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/254402
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a88 1
        check-spf ( warn | ignore );
d203 1
a203 1
            max-policy-ttl <integer> ] [ min-ns-dots <integer> ];
a309 1
        check-spf ( warn | ignore );
d408 1
a408 1
            max-policy-ttl <integer> ] [ min-ns-dots <integer> ];
a472 1
                check-spf ( warn | ignore );
a560 1
        check-spf ( warn | ignore );
@


1.6.2.4
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/254897
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@d70 2
a71 3
        also-notify [ port <integer> ] { ( <masters> | <ipv4_address> [
            port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
            <string> ]; ... };
a117 1
        dnssec-loadkeys-interval <integer>;
a120 1
        dnssec-update-mode ( maintain | no-resign );
a143 1
        inline-signing <boolean>;
a162 1
        max-rsa-exponent-size <integer>;
a196 1
        request-ixfr <boolean>;
a211 1
        serial-update-method ( increment | unixtime );
d250 1
a250 1
        zone-statistics <zonestat>;
d296 2
a297 3
        also-notify [ port <integer> ] { ( <masters> | <ipv4_address> [
            port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
            <string> ]; ... };
a339 1
        dnssec-loadkeys-interval <integer>;
a342 1
        dnssec-update-mode ( maintain | no-resign );
a356 1
        inline-signing <boolean>;
a403 1
        request-ixfr <boolean>;
a414 1
        serial-update-method ( increment | unixtime );
d462 2
a463 3
                also-notify [ port <integer> ] { ( <masters> |
                    <ipv4_address> [ port <integer> ] | <ipv6_address> [
                    port <integer> ] ) [ key <string> ]; ... };
a481 1
                dnssec-loadkeys-interval <integer>;
a482 1
                dnssec-update-mode ( maintain | no-resign );
a486 1
                inline-signing <boolean>;
a517 2
                request-ixfr <boolean>;
                serial-update-method ( increment | unixtime );
d531 1
a531 1
                    | delegation-only | redirect );
d540 1
a540 1
                zone-statistics <zonestat>;
d542 1
a542 1
        zone-statistics <zonestat>;
d552 2
a553 3
        also-notify [ port <integer> ] { ( <masters> | <ipv4_address> [
            port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
            <string> ]; ... };
a570 1
        dnssec-loadkeys-interval <integer>;
a571 1
        dnssec-update-mode ( maintain | no-resign );
a575 1
        inline-signing <boolean>;
a603 2
        request-ixfr <boolean>;
        serial-update-method ( increment | unixtime );
d615 1
a615 1
            delegation-only | redirect );
d623 1
a623 1
        zone-statistics <zonestat>;
@


1.6.2.5
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/262706
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@d202 1
d415 1
@


1.5
log
@SVN rev 224092 on 2011-07-16 11:12:09Z by dougb

Upgrade to version 9.8.0-P4

This version has many new features, see /usr/share/doc/bind9/README
for details.
@
text
@d116 1
a116 1
        dnssec-lookaside <string> trust-anchor <string>;
d335 1
a335 1
        dnssec-lookaside <string> trust-anchor <string>;
d462 1
a462 1
                auto-dnssec ( allow | maintain | create | off );
d550 1
a550 1
        auto-dnssec ( allow | maintain | create | off );
@


1.4
log
@SVN rev 218384 on 2011-02-06 22:46:07Z by dougb

Update to BIND 9.6.3, the latest from ISC on the 9.6 branch.

All 9.6 users with DNSSEC validation enabled should upgrade to this
version, or the latest version in the 9.7 branch, prior to 2011-03-31
in order to avoid validation failures for names in .COM as described
here:

https://www.isc.org/announcement/bind-9-dnssec-validation-fails-new-ds-record

In addition the fixes for this and other bugs, there are also the
following:

  * Various fixes to kerberos support, including GSS-TSIG
  * Various fixes to avoid leaking memory, and to problems that could
    prevent a clean shutdown of named
@
text
@d47 3
d58 1
d75 1
d79 1
d82 1
d95 4
d103 10
d114 1
d118 2
a119 1
        dnssec-validation <boolean>;
d131 2
d149 1
d197 5
d206 1
d210 3
d227 1
d281 1
d298 1
d301 1
d312 4
d322 10
d333 1
d337 2
a338 1
        dnssec-validation <boolean>;
d347 2
d360 2
d400 5
d462 2
d474 2
d511 3
d523 2
a524 2
                type ( master | slave | stub | hint | forward |
                    delegation-only );
d526 2
a527 2
                update-policy { ( grant | deny ) <string> ( name |
                    subdomain | wildcard | self | selfsub | selfwild |
d529 2
a530 1
                    tcp-self | 6to4-self ) <string> <rrtypelist>; ... };
d550 2
d562 2
d596 3
d606 2
a607 1
        type ( master | slave | stub | hint | forward | delegation-only );
d609 4
a612 4
        update-policy { ( grant | deny ) <string> ( name | subdomain |
            wildcard | self | selfsub | selfwild | krb5-self | ms-self |
            krb5-subdomain | ms-subdomain | tcp-self | 6to4-self ) <string>
            <rrtypelist>; ... };
@


1.3
log
@SVN rev 193149 on 2009-05-31 05:42:58Z by dougb

Update BIND to version 9.6.1rc1. This version has better performance and
lots of new features compared to 9.4.x, including:

	Full NSEC3 support
	Automatic zone re-signing
	New update-policy methods tcp-self and 6to4-self
	DHCID support.
	More detailed statistics counters including those supported in BIND 8.
	Faster ACL processing.
	Efficient LRU cache-cleaning mechanism.
	NSID support.
@
text
@d177 1
a177 1
        server-id ( <quoted_string> | none |;
@


1.3.2.1
log
@SVN rev 218334 on 2011-02-05 19:13:34Z by dougb

Update to BIND 9.6.3, the latest from ISC on the 9.6 branch.

All 9.6 users with DNSSEC validation enabled should upgrade to this
version, or the latest version in the 9.7 branch, prior to 2011-03-31
in order to avoid validation failures for names in .COM as described
here:

https://www.isc.org/announcement/bind-9-dnssec-validation-fails-new-ds-record

In addition the fixes for this and other bugs, there are also the
following:

  * Various fixes to kerberos support, including GSS-TSIG
  * Various fixes to avoid leaking memory, and to problems that could
    prevent a clean shutdown of named
@
text
@d177 1
a177 1
        server-id ( <quoted_string> | none | hostname );
@


1.3.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/246656
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a46 3
managed-keys { <string> <string> <integer> <integer> <integer>
    <quoted_string>; ... };

a54 1
        allow-new-zones <boolean>;
a70 1
        attach-cache <string>;
a71 1
        auto-dnssec ( allow | maintain | off );
a73 1
        bindkeys-file <quoted_string>;
a75 1
        check-dup-records ( fail | warn | ignore );
a87 4
        deny-answer-addresses { <address_match_element>; ... } [
            except-from { <quoted_string>; ... } ];
        deny-answer-aliases { <quoted_string>; ... } [ except-from {
            <quoted_string>; ... } ];
a91 10
        dns64 <netprefix> {
                break-dnssec <boolean>;
                clients { <address_match_element>; ... };
                exclude { <address_match_element>; ... };
                mapped { <address_match_element>; ... };
                recursive-only <boolean>;
                suffix <ipv6_address>;
        };
        dns64-contact <string>;
        dns64-server <string>;
a92 1
        dnssec-dnskey-kskonly <boolean>;
d94 1
a94 1
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
d96 1
a96 2
        dnssec-secure-to-insecure <boolean>;
        dnssec-validation ( yes | no | auto );
a107 2
        filter-aaaa { <address_match_element>; ... }; // not configured
        filter-aaaa-on-v4 <v4_aaaa>; // not configured
a123 1
        managed-keys-directory <quoted_string>;
a170 6
        resolver-query-timeout <integer>;
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
a174 1
        secroots-file <quoted_string>;
a177 3
        session-keyalg <string>;
        session-keyfile ( <quoted_string> | none );
        session-keyname <string>;
a191 1
        tkey-gssapi-keytab <quoted_string>;
a244 1
        allow-new-zones <boolean>;
a260 1
        attach-cache <string>;
a261 1
        auto-dnssec ( allow | maintain | off );
a262 1
        check-dup-records ( fail | warn | ignore );
a272 4
        deny-answer-addresses { <address_match_element>; ... } [
            except-from { <quoted_string>; ... } ];
        deny-answer-aliases { <quoted_string>; ... } [ except-from {
            <quoted_string>; ... } ];
a278 10
        dns64 <netprefix> {
                break-dnssec <boolean>;
                clients { <address_match_element>; ... };
                exclude { <address_match_element>; ... };
                mapped { <address_match_element>; ... };
                recursive-only <boolean>;
                suffix <ipv6_address>;
        };
        dns64-contact <string>;
        dns64-server <string>;
a279 1
        dnssec-dnskey-kskonly <boolean>;
d281 1
a281 1
        dnssec-lookaside ( <string> trust-anchor <string> | auto | no );
d283 1
a283 2
        dnssec-secure-to-insecure <boolean>;
        dnssec-validation ( yes | no | auto );
a291 2
        filter-aaaa { <address_match_element>; ... }; // not configured
        filter-aaaa-on-v4 <v4_aaaa>; // not configured
a302 2
        managed-keys { <string> <string> <integer> <integer> <integer>
            <quoted_string>; ... };
a340 6
        resolver-query-timeout <integer>;
        response-policy { zone <quoted_string> [ policy ( given | disabled
            | passthru | no-op | nxdomain | nodata | cname <quoted_string>
            ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ];
            ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [
            max-policy-ttl <integer> ];
a397 2
                auto-dnssec ( allow | maintain | off );
                check-dup-records ( fail | warn | ignore );
a407 2
                dnssec-dnskey-kskonly <boolean>;
                dnssec-secure-to-insecure <boolean>;
a442 3
                server-addresses { ( <ipv4_address> | <ipv6_address> ) [
                    port <integer> ]; ... };
                server-names { <quoted_string>; ... };
d452 2
a453 2
                type ( master | slave | stub | static-stub | hint | forward
                    | delegation-only );
d455 2
a456 2
                update-policy ( local | { ( grant | deny ) <string> ( name
                    | subdomain | wildcard | self | selfsub | selfwild |
d458 1
a458 2
                    tcp-self | 6to4-self | zonesub | external ) [ <string>
                    ] <rrtypelist>; ... };
a477 2
        auto-dnssec ( allow | maintain | off );
        check-dup-records ( fail | warn | ignore );
a487 2
        dnssec-dnskey-kskonly <boolean>;
        dnssec-secure-to-insecure <boolean>;
a519 3
        server-addresses { ( <ipv4_address> | <ipv6_address> ) [ port
            <integer> ]; ... };
        server-names { <quoted_string>; ... };
d527 1
a527 2
        type ( master | slave | stub | static-stub | hint | forward |
            delegation-only );
d529 4
a532 4
        update-policy ( local | { ( grant | deny ) <string> ( name |
            subdomain | wildcard | self | selfsub | selfwild | krb5-self |
            ms-self | krb5-subdomain | ms-subdomain | tcp-self | 6to4-self
            | zonesub | external ) [ <string> ] <rrtypelist>; ... };
@


1.3.2.3
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/262707
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a88 1
        check-spf ( warn | ignore );
d203 1
a203 1
            max-policy-ttl <integer> ] [ min-ns-dots <integer> ];
a309 1
        check-spf ( warn | ignore );
d408 1
a408 1
            max-policy-ttl <integer> ] [ min-ns-dots <integer> ];
a472 1
                check-spf ( warn | ignore );
a560 1
        check-spf ( warn | ignore );
@


1.2
log
@SVN rev 186462 on 2008-12-23 22:47:56Z by dougb

Merge from vendor/bind9/dist as of the 9.4.3 import
@
text
@d58 2
d61 1
d140 1
d153 2
d162 2
d169 1
d178 4
a181 1
        sig-validity-interval <integer>;
d200 1
d205 1
d233 5
d248 2
d251 1
d330 2
d336 2
d340 1
d367 4
a370 1
        sig-validity-interval <integer>;
d379 1
d382 1
d388 1
d439 2
d443 4
a446 1
                sig-validity-interval <integer>;
d451 1
d456 3
a458 2
                    subdomain | wildcard | self | selfsub | selfwild )
                    <string> <rrtypelist>; ... };
d469 1
d517 2
d520 4
a523 1
        sig-validity-interval <integer>;
d526 1
d530 3
a532 2
            wildcard | self | selfsub | selfwild ) <string> <rrtypelist>;
            ... };
@


1.1
log
@Initial revision
@
text
@d5 45
d51 20
a70 2
        avoid-v4-udp-ports { <port>; ... };
        avoid-v6-udp-ports { <port>; ... };
d72 10
d85 1
d87 10
d98 4
d103 1
d105 4
d112 1
d115 3
d120 2
d123 14
d138 5
d145 4
d151 4
d156 1
d158 1
a158 1
        random-device <quoted_string>;
d160 6
d169 2
d174 1
d178 1
d180 4
a183 2
        tkey-domain <quoted_string>;
        transfers-per-ns <integer>;
d186 1
d188 2
d192 2
d195 13
a207 9
        allow-recursion { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        sortlist { <address_match_element>; ... };
        topology { <address_match_element>; ... }; // not implemented
        auth-nxdomain <boolean>; // default changed
        minimal-responses <boolean>;
        recursion <boolean>;
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
d209 2
d212 12
a223 2
        fetch-glue <boolean>; // obsolete
        rfc2308-type1 <boolean>; // not yet implemented
d226 1
a226 21
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        cleaning-interval <integer>;
        min-roots <integer>; // not implemented
        lame-ttl <integer>;
        max-ncache-ttl <integer>;
        max-cache-ttl <integer>;
        transfer-format ( many-answers | one-answer );
        max-cache-size <size_no_default>;
        check-names ( master | slave | response ) ( fail | warn | ignore );
        cache-file <quoted_string>;
        suppress-initial-notify <boolean>; // not yet implemented
        preferred-glue <string>;
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [port
            <integer>] | <ipv4_address> [port <integer>] | <ipv6_address> [port <integer>] ); ... };
        edns-udp-size <integer>;
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        disable-algorithms <string> { <string>; ... };
        dnssec-enable <boolean>;
        dnssec-lookaside <string> trust-anchor <string>;
        dnssec-must-be-secure <string> <boolean>;
d228 2
d231 1
d233 1
a233 4
        allow-notify { <address_match_element>; ... };
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
d236 15
d252 18
d273 7
a279 1
        ixfr-from-differences <boolean>;
d281 8
d291 5
d298 2
a299 3
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-retry-time <integer>;
d301 2
a302 2
        max-refresh-time <integer>;
        min-refresh-time <integer>;
d304 36
d341 4
d347 3
a349 4
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
            ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
d351 2
a352 37
        zone-statistics <boolean>;
        key-directory <quoted_string>;
};

controls {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] allow { <address_match_element>; ... } [ keys { <string>; ... } ];
        unix <unsupported>; // not implemented
};

acl <string> { <address_match_element>; ... };

masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [port
    <integer>] | <ipv6_address> [port <integer>] ) [ key <string> ]; ... };

logging {
        channel <string> {
                file <log_file>;
                syslog <optional_facility>;
                null;
                stderr;
                severity <log_severity>;
                print-time <boolean>;
                print-severity <boolean>;
                print-category <boolean>;
        };
        category <string> { <string>; ... };
};

view <string> <optional_class> {
        match-clients { <address_match_element>; ... };
        match-destinations { <address_match_element>; ... };
        match-recursive-only <boolean>;
        key <string> {
                algorithm <string>;
                secret <string>;
        };
d354 1
a354 15
                type ( master | slave | stub | hint | forward |
                    delegation-only );
                allow-update { <address_match_element>; ... };
                file <quoted_string>;
                ixfr-base <quoted_string>; // obsolete
                ixfr-tmp-file <quoted_string>; // obsolete
                masters [ port <integer> ] { ( <masters> | <ipv4_address>
                    [port <integer>] | <ipv6_address> [port <integer>] ) [ key <string> ]; ... };
                pubkey <integer> <integer> <integer> <quoted_string>; //
                    obsolete
                update-policy { ( grant | deny ) <string> ( name |
                    subdomain | wildcard | self ) <string> <rrtypelist>; ... };
                database <string>;
                delegation-only <boolean>;
                check-names ( fail | warn | ignore );
d357 1
a358 6
                allow-notify { <address_match_element>; ... };
                notify <notifytype>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
d361 13
d375 1
d379 1
d381 3
d385 4
d391 4
d397 1
a397 3
                max-transfer-idle-in <integer>;
                max-transfer-idle-out <integer>;
                max-retry-time <integer>;
a398 2
                max-refresh-time <integer>;
                min-refresh-time <integer>;
d400 8
d413 6
a418 4
                alt-transfer-source ( <ipv4_address> | * ) [ port (
                    <integer> | * ) ];
                alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
d420 1
a421 1
                key-directory <quoted_string>;
d423 5
a427 52
        server <netaddr> {
                bogus <boolean>;
                provide-ixfr <boolean>;
                request-ixfr <boolean>;
                support-ixfr <boolean>; // obsolete
                transfers <integer>;
                transfer-format ( many-answers | one-answer );
                keys <server_key>;
                edns <boolean>;
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
        };
        trusted-keys { <string> <integer> <integer> <integer>
            <quoted_string>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        sortlist { <address_match_element>; ... };
        topology { <address_match_element>; ... }; // not implemented
        auth-nxdomain <boolean>; // default changed
        minimal-responses <boolean>;
        recursion <boolean>;
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
        provide-ixfr <boolean>;
        request-ixfr <boolean>;
        fetch-glue <boolean>; // obsolete
        rfc2308-type1 <boolean>; // not yet implemented
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        cleaning-interval <integer>;
        min-roots <integer>; // not implemented
        lame-ttl <integer>;
        max-ncache-ttl <integer>;
        max-cache-ttl <integer>;
        transfer-format ( many-answers | one-answer );
        max-cache-size <size_no_default>;
        check-names ( master | slave | response ) ( fail | warn | ignore );
        cache-file <quoted_string>;
        suppress-initial-notify <boolean>; // not yet implemented
        preferred-glue <string>;
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [port
            <integer>] | <ipv4_address> [port <integer>] | <ipv6_address> [port <integer>] ); ... };
        edns-udp-size <integer>;
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        disable-algorithms <string> { <string>; ... };
        dnssec-enable <boolean>;
        dnssec-lookaside <string> trust-anchor <string>;
        dnssec-must-be-secure <string> <boolean>;
d430 1
a431 4
        allow-notify { <address_match_element>; ... };
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
d434 1
a434 22
        dialup <dialuptype>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ixfr-from-differences <boolean>;
        maintain-ixfr-base <boolean>; // obsolete
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-retry-time <integer>;
        min-retry-time <integer>;
        max-refresh-time <integer>;
        min-refresh-time <integer>;
        multi-master <boolean>;
        sig-validity-interval <integer>;
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
            ];
d437 7
a443 29
        use-alt-transfer-source <boolean>;
        zone-statistics <boolean>;
        key-directory <quoted_string>;
};

lwres {
        listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        view <string> <optional_class>;
        search { <string>; ... };
        ndots <integer>;
};

key <string> {
        algorithm <string>;
        secret <string>;
};

zone <string> <optional_class> {
        type ( master | slave | stub | hint | forward | delegation-only );
        allow-update { <address_match_element>; ... };
        file <quoted_string>;
        ixfr-base <quoted_string>; // obsolete
        ixfr-tmp-file <quoted_string>; // obsolete
        masters [ port <integer> ] { ( <masters> | <ipv4_address> [port
            <integer>] | <ipv6_address> [port <integer>] ) [ key <string> ]; ... };
        pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
        update-policy { ( grant | deny ) <string> ( name | subdomain |
            wildcard | self ) <string> <rrtypelist>; ... };
a445 10
        check-names ( fail | warn | ignore );
        allow-query { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-notify { <address_match_element>; ... };
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
d447 1
d451 1
d453 3
d457 4
d463 4
d469 1
a469 3
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-retry-time <integer>;
a470 2
        max-refresh-time <integer>;
        min-refresh-time <integer>;
d472 5
d480 5
a484 4
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * )
            ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
d486 1
a487 1
        key-directory <quoted_string>;
a489 15
server <netaddr> {
        bogus <boolean>;
        provide-ixfr <boolean>;
        request-ixfr <boolean>;
        support-ixfr <boolean>; // obsolete
        transfers <integer>;
        transfer-format ( many-answers | one-answer );
        keys <server_key>;
        edns <boolean>;
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

@


1.1.1.1
log
@Vender import of BIND 9.3.0rc4.
@
text
@@


1.1.1.2
log
@Vendor import of BIND 9.3.1
@
text
@a18 1
        host-statistics-max <integer>; // not implemented
@


1.1.1.2.2.1
log
@MFC import of BIND 9.3.2
@
text
@a51 1
        flush-zones-on-shutdown <boolean>;
@


1.1.1.2.2.2
log
@SVN rev 179502 on 2008-06-03 05:38:10Z by dougb

Update to version 9.3.5. It contains the latest bug fixes, updates
to root server addresses, and a fix for the vulnerability mentioned
here: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0122

Users of BIND 9.3.x are strongly encouraged to upgrade to this
version. Also, the 9.3.x branch is now in maintenance-only mode.
Users are encouraged to investigate BIND 9.4.x or perhaps 9.5.x.

http://www.isc.org/index.pl?/sw/bind/versions_and_support.php

This udpate is being done by updating the files directly in this
branch rather than an import + MFC because BIND in HEAD is 9.4.x.
@
text
@a4 39
acl <string> { <address_match_element>; ... };

controls {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] allow { <address_match_element>; ... } [ keys { <string>;
            ... } ];
        unix <unsupported>; // not implemented
};

key <string> {
        algorithm <string>;
        secret <string>;
};

logging {
        category <string> { <string>; ... };
        channel <string> {
                file <log_file>;
                null;
                print-category <boolean>;
                print-severity <boolean>;
                print-time <boolean>;
                severity <log_severity>;
                stderr;
                syslog <optional_facility>;
        };
};

lwres {
        listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ndots <integer>;
        search { <string>; ... };
        view <string> <optional_class>;
};

masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [port
    <integer>] | <ipv6_address> [port <integer>] ) [ key <string> ]; ... };

a5 14
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        auth-nxdomain <boolean>; // default changed
a8 3
        cache-file <quoted_string>;
        check-names ( master | slave | response ) ( fail | warn | ignore );
        cleaning-interval <integer>;
a11 1
        dialup <dialuptype>;
a12 7
        disable-algorithms <string> { <string>; ... };
        dnssec-enable <boolean>;
        dnssec-lookaside <string> trust-anchor <string>;
        dnssec-must-be-secure <string> <boolean>;
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [port
            <integer>] | <ipv4_address> [port <integer>] | <ipv6_address>
            [port <integer>] ); ... };
a13 1
        edns-udp-size <integer>;
a14 1
        fetch-glue <boolean>; // obsolete
a15 4
        flush-zones-on-shutdown <boolean>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
a21 3
        ixfr-from-differences <boolean>;
        key-directory <quoted_string>;
        lame-ttl <integer>;
a23 1
        maintain-ixfr-base <boolean>; // obsolete
a24 11
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
a25 5
        min-refresh-time <integer>;
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
        multi-master <boolean>;
a27 3
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
a29 4
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
d31 1
a32 2
        recursing-file <quoted_string>;
        recursion <boolean>;
a33 5
        request-ixfr <boolean>;
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
a36 2
        sig-validity-interval <integer>;
        sortlist { <address_match_element>; ... };
a39 1
        suppress-initial-notify <boolean>; // not yet implemented
d43 1
d45 1
a45 5
        tkey-gssapi-credential <quoted_string>;
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
a47 1
        transfers-per-ns <integer>;
a48 1
        use-alt-transfer-source <boolean>;
d52 10
a61 7
        zone-statistics <boolean>;
};

server <netaddr> {
        bogus <boolean>;
        edns <boolean>;
        keys <server_key>;
d64 2
a65 10
        support-ixfr <boolean>; // obsolete
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        transfers <integer>;
};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

view <string> <optional_class> {
d68 21
a88 1
        allow-notify { <address_match_element>; ... };
a89 1
        allow-recursion { <address_match_element>; ... };
d92 4
a95 1
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
a97 7
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        auth-nxdomain <boolean>; // default changed
        cache-file <quoted_string>;
        check-names ( master | slave | response ) ( fail | warn | ignore );
        cleaning-interval <integer>;
a98 9
        disable-algorithms <string> { <string>; ... };
        dnssec-enable <boolean>;
        dnssec-lookaside <string> trust-anchor <string>;
        dnssec-must-be-secure <string> <boolean>;
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [port
            <integer>] | <ipv4_address> [port <integer>] | <ipv6_address>
            [port <integer>] ); ... };
        edns-udp-size <integer>;
        fetch-glue <boolean>; // obsolete
a102 6
        key <string> {
                algorithm <string>;
                secret <string>;
        };
        key-directory <quoted_string>;
        lame-ttl <integer>;
a103 5
        match-clients { <address_match_element>; ... };
        match-destinations { <address_match_element>; ... };
        match-recursive-only <boolean>;
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
d106 2
a107 3
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
d110 3
a112 2
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
a113 3
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
a114 27
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        recursion <boolean>;
        request-ixfr <boolean>;
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
        server <netaddr> {
                bogus <boolean>;
                edns <boolean>;
                keys <server_key>;
                provide-ixfr <boolean>;
                request-ixfr <boolean>;
                support-ixfr <boolean>; // obsolete
                transfer-format ( many-answers | one-answer );
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                transfers <integer>;
        };
a115 4
        sortlist { <address_match_element>; ... };
        suppress-initial-notify <boolean>; // not yet implemented
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
d118 4
a121 2
        trusted-keys { <string> <integer> <integer> <integer>
            <quoted_string>; ... };
d123 37
d161 15
a175 1
                allow-notify { <address_match_element>; ... };
a177 1
                allow-update { <address_match_element>; ... };
d179 6
a186 7
                alt-transfer-source ( <ipv4_address> | * ) [ port (
                    <integer> | * ) ];
                alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                check-names ( fail | warn | ignore );
                database <string>;
                delegation-only <boolean>;
a187 1
                file <quoted_string>;
a190 1
                ixfr-base <quoted_string>; // obsolete
a191 2
                ixfr-tmp-file <quoted_string>; // obsolete
                key-directory <quoted_string>;
a192 3
                masters [ port <integer> ] { ( <masters> | <ipv4_address>
                    [port <integer>] | <ipv6_address> [port <integer>] ) [
                    key <string> ]; ... };
d195 2
a196 2
                max-refresh-time <integer>;
                max-retry-time <integer>;
d199 3
a201 2
                max-transfer-time-in <integer>;
                max-transfer-time-out <integer>;
a202 1
                min-retry-time <integer>;
a203 7
                notify <notifytype>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                pubkey <integer> <integer> <integer>
                    <quoted_string>; // obsolete
d209 4
a212 5
                type ( master | slave | stub | hint | forward |
                    delegation-only );
                update-policy { ( grant | deny ) <string> ( name |
                    subdomain | wildcard | self ) <string> <rrtypelist>;
                    ... };
d215 1
d217 86
d304 14
d321 13
a333 1
        allow-notify { <address_match_element>; ... };
a335 1
        allow-update { <address_match_element>; ... };
d337 4
a342 6
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        check-names ( fail | warn | ignore );
        database <string>;
        delegation-only <boolean>;
a343 1
        file <quoted_string>;
a346 1
        ixfr-base <quoted_string>; // obsolete
a347 2
        ixfr-tmp-file <quoted_string>; // obsolete
        key-directory <quoted_string>;
a348 3
        masters [ port <integer> ] { ( <masters> | <ipv4_address> [port
            <integer>] | <ipv6_address> [port <integer>] ) [ key <string>
            ]; ... };
d351 2
a352 2
        max-refresh-time <integer>;
        max-retry-time <integer>;
d355 3
a357 2
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
a358 1
        min-retry-time <integer>;
a359 4
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
d363 4
a366 3
        type ( master | slave | stub | hint | forward | delegation-only );
        update-policy { ( grant | deny ) <string> ( name | subdomain |
            wildcard | self ) <string> <rrtypelist>; ... };
d369 1
d372 15
@


1.1.1.2.2.3
log
@SVN rev 186999 on 2009-01-10 04:30:27Z by dougb

Merge from vendor/bind9/dist-9.3 as of the 9.3.6-P1 import
@
text
@d22 1
a22 2
                file <quoted_string> [ versions ( "unlimited" | <integer> )
                    ] [ size <size> ];
d41 2
a42 2
masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port
    <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };
d59 2
a60 2
        avoid-v4-udp-ports { <portrange>; ... };
        avoid-v6-udp-ports { <portrange>; ... };
d74 3
a76 3
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
a132 1
        reserved-sockets <integer>;
a161 2
        use-v4-udp-ports { <portrange>; ... };
        use-v6-udp-ports { <portrange>; ... };
d204 3
a206 3
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
d301 3
a303 3
                masters [ port <integer> ] { ( <masters> | <ipv4_address> [
                    port <integer> ] | <ipv6_address> [ port <integer> ] )
                    [ key <string> ]; ... };
d362 3
a364 3
        masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port
            <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
            <string> ]; ... };
@


1.1.1.3
log
@Vendor import of BIND 9.3.2
@
text
@a51 1
        flush-zones-on-shutdown <boolean>;
@


1.1.1.4
log
@Vendor import of BIND 9.4.1
@
text
@a52 1
        allow-query-cache { <address_match_element>; ... };
a83 1
        max-udp-size <integer>;
a86 1
        dnssec-validation <boolean>;
a88 12
        dnssec-accept-expired <boolean>;
        ixfr-from-differences <ixfrdiff>;
        acache-enable <boolean>;
        acache-cleaning-interval <integer>;
        max-acache-size <size_no_default>;
        clients-per-query <integer>;
        max-clients-per-query <integer>;
        empty-server <string>;
        empty-contact <string>;
        empty-zones-enable <boolean>;
        disable-empty-zone <string>;
        zero-no-soa-ttl-cache <boolean>;
a90 1
        allow-update { <address_match_element>; ... };
a92 1
        masterfile-format ( text | raw );
a97 1
        notify-delay <integer>;
d102 1
a124 8
        check-wildcard <boolean>;
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-srv-cname ( fail | warn | ignore );
        check-sibling <boolean>;
        zero-no-soa-ttl <boolean>;
        update-check-ksk <boolean>;
d130 1
a130 2
        unix <quoted_string> perm <integer> owner <integer> group <integer>
            [ keys { <string>; ... } ];
d163 1
a164 1
                journal <quoted_string>;
d172 1
a172 1
                    subdomain | wildcard | self | selfsub | selfwild ) <string> <rrtypelist>; ... };
a175 1
                ixfr-from-differences <boolean>;
a177 1
                allow-update { <address_match_element>; ... };
a179 1
                masterfile-format ( text | raw );
a186 1
                notify-delay <integer>;
d191 1
a215 11
                check-wildcard <boolean>;
                check-integrity <boolean>;
                check-mx ( fail | warn | ignore );
                check-mx-cname ( fail | warn | ignore );
                check-srv-cname ( fail | warn | ignore );
                check-sibling <boolean>;
                zero-no-soa-ttl <boolean>;
                update-check-ksk <boolean>;
        };
        dlz <string> {
                database <string>;
d217 1
a217 1
        server <netprefix> {
a225 8
                edns-udp-size <integer>;
                max-udp-size <integer>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                query-source <querysource4>;
                query-source-v6 <querysource6>;
a232 1
        allow-query-cache { <address_match_element>; ... };
a263 1
        max-udp-size <integer>;
a266 1
        dnssec-validation <boolean>;
a268 12
        dnssec-accept-expired <boolean>;
        ixfr-from-differences <ixfrdiff>;
        acache-enable <boolean>;
        acache-cleaning-interval <integer>;
        max-acache-size <size_no_default>;
        clients-per-query <integer>;
        max-clients-per-query <integer>;
        empty-server <string>;
        empty-contact <string>;
        empty-zones-enable <boolean>;
        disable-empty-zone <string>;
        zero-no-soa-ttl-cache <boolean>;
a270 1
        allow-update { <address_match_element>; ... };
a272 1
        masterfile-format ( text | raw );
a277 1
        notify-delay <integer>;
d282 1
a304 9
        check-wildcard <boolean>;
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-srv-cname ( fail | warn | ignore );
        check-sibling <boolean>;
        zero-no-soa-ttl <boolean>;
        update-check-ksk <boolean>;
        database <string>;
d322 1
a323 1
        journal <quoted_string>;
d330 1
a330 1
            wildcard | self | selfsub | selfwild ) <string> <rrtypelist>; ... };
a333 1
        ixfr-from-differences <boolean>;
a335 1
        allow-update { <address_match_element>; ... };
a337 1
        masterfile-format ( text | raw );
a342 1
        notify-delay <integer>;
d347 1
a369 8
        check-wildcard <boolean>;
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-srv-cname ( fail | warn | ignore );
        check-sibling <boolean>;
        zero-no-soa-ttl <boolean>;
        update-check-ksk <boolean>;
d372 1
a372 5
dlz <string> {
        database <string>;
};

server <netprefix> {
a380 6
        edns-udp-size <integer>;
        max-udp-size <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        query-source <querysource4>;
        query-source-v6 <querysource6>;
@


1.1.1.4.2.1
log
@SVN rev 186996 on 2009-01-10 03:00:21Z by dougb

MFC the BIND 9.4.3 and 9.4.3-P1 updates
@
text
@a4 45
acl <string> { <address_match_element>; ... };

controls {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] allow { <address_match_element>; ... } [ keys { <string>;
            ... } ];
        unix <quoted_string> perm <integer> owner <integer> group <integer>
            [ keys { <string>; ... } ];
};

dlz <string> {
        database <string>;
};

key <string> {
        algorithm <string>;
        secret <string>;
};

logging {
        category <string> { <string>; ... };
        channel <string> {
                file <quoted_string> [ versions ( "unlimited" | <integer> )
                    ] [ size <size> ];
                null;
                print-category <boolean>;
                print-severity <boolean>;
                print-time <boolean>;
                severity <log_severity>;
                stderr;
                syslog <optional_facility>;
        };
};

lwres {
        listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ndots <integer>;
        search { <string>; ... };
        view <string> <optional_class>;
};

masters <string> [ port <integer> ] { ( <masters> | <ipv4_address> [ port
    <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ]; ... };

d6 2
a7 20
        acache-cleaning-interval <integer>;
        acache-enable <boolean>;
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        allow-notify { <address_match_element>; ... };
        allow-query { <address_match_element>; ... };
        allow-query-cache { <address_match_element>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> |
            * ) ];
        auth-nxdomain <boolean>; // default changed
        avoid-v4-udp-ports { <portrange>; ... };
        avoid-v6-udp-ports { <portrange>; ... };
a8 10
        cache-file <quoted_string>;
        check-integrity <boolean>;
        check-mx ( fail | warn | ignore );
        check-mx-cname ( fail | warn | ignore );
        check-names ( master | slave | response ) ( fail | warn | ignore );
        check-sibling <boolean>;
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        cleaning-interval <integer>;
        clients-per-query <integer>;
a11 1
        dialup <dialuptype>;
a12 10
        disable-algorithms <string> { <string>; ... };
        disable-empty-zone <string>;
        dnssec-accept-expired <boolean>;
        dnssec-enable <boolean>;
        dnssec-lookaside <string> trust-anchor <string>;
        dnssec-must-be-secure <string> <boolean>;
        dnssec-validation <boolean>;
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
a13 4
        edns-udp-size <integer>;
        empty-contact <string>;
        empty-server <string>;
        empty-zones-enable <boolean>;
a14 1
        fetch-glue <boolean>; // obsolete
a15 4
        flush-zones-on-shutdown <boolean>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
a21 3
        ixfr-from-differences <ixfrdiff>;
        key-directory <quoted_string>;
        lame-ttl <integer>;
a23 2
        maintain-ixfr-base <boolean>; // obsolete
        masterfile-format ( text | raw );
a24 14
        max-acache-size <size_no_default>;
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
        max-clients-per-query <integer>;
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-udp-size <integer>;
a25 5
        min-refresh-time <integer>;
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
        multi-master <boolean>;
a27 4
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
a29 4
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
d31 1
a32 2
        recursing-file <quoted_string>;
        recursion <boolean>;
a33 6
        request-ixfr <boolean>;
        reserved-sockets <integer>;
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
a36 2
        sig-validity-interval <integer>;
        sortlist { <address_match_element>; ... };
a39 1
        suppress-initial-notify <boolean>; // not yet implemented
d43 1
d45 1
a45 5
        tkey-gssapi-credential <quoted_string>;
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
a47 1
        transfers-per-ns <integer>;
a48 2
        update-check-ksk <boolean>;
        use-alt-transfer-source <boolean>;
a50 2
        use-v4-udp-ports { <portrange>; ... };
        use-v6-udp-ports { <portrange>; ... };
d52 11
a62 13
        zero-no-soa-ttl <boolean>;
        zero-no-soa-ttl-cache <boolean>;
        zone-statistics <boolean>;
};

server <netprefix> {
        bogus <boolean>;
        edns <boolean>;
        edns-udp-size <integer>;
        keys <server_key>;
        max-udp-size <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
d64 5
d71 5
a75 2
        request-ixfr <boolean>;
        support-ixfr <boolean>; // obsolete
d77 18
a94 8
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        transfers <integer>;
};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };

view <string> <optional_class> {
d96 8
a103 4
        acache-enable <boolean>;
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        allow-notify { <address_match_element>; ... };
a104 2
        allow-query-cache { <address_match_element>; ... };
        allow-recursion { <address_match_element>; ... };
d108 5
a112 1
        allow-v6-synthesis { <address_match_element>; ... }; // obsolete
d115 22
a136 1
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
d139 4
a142 2
        auth-nxdomain <boolean>; // default changed
        cache-file <quoted_string>;
d146 1
a146 1
        check-names ( master | slave | response ) ( fail | warn | ignore );
d148 26
a173 10
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
        cleaning-interval <integer>;
        clients-per-query <integer>;
        database <string>;
        dialup <dialuptype>;
        disable-algorithms <string> { <string>; ... };
        disable-empty-zone <string>;
        dlz <string> {
                database <string>;
d175 7
a181 17
        dnssec-accept-expired <boolean>;
        dnssec-enable <boolean>;
        dnssec-lookaside <string> trust-anchor <string>;
        dnssec-must-be-secure <string> <boolean>;
        dnssec-validation <boolean>;
        dual-stack-servers [ port <integer> ] { ( <quoted_string> [ port
            <integer> ] | <ipv4_address> [ port <integer> ] |
            <ipv6_address> [ port <integer> ] ); ... };
        edns-udp-size <integer>;
        empty-contact <string>;
        empty-server <string>;
        empty-zones-enable <boolean>;
        fetch-glue <boolean>; // obsolete
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        ixfr-from-differences <ixfrdiff>;
a185 75
        key-directory <quoted_string>;
        lame-ttl <integer>;
        maintain-ixfr-base <boolean>; // obsolete
        masterfile-format ( text | raw );
        match-clients { <address_match_element>; ... };
        match-destinations { <address_match_element>; ... };
        match-recursive-only <boolean>;
        max-acache-size <size_no_default>;
        max-cache-size <size_no_default>;
        max-cache-ttl <integer>;
        max-clients-per-query <integer>;
        max-ixfr-log-size <size>; // obsolete
        max-journal-size <size_no_default>;
        max-ncache-ttl <integer>;
        max-refresh-time <integer>;
        max-retry-time <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-udp-size <integer>;
        min-refresh-time <integer>;
        min-retry-time <integer>;
        min-roots <integer>; // not implemented
        minimal-responses <boolean>;
        multi-master <boolean>;
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        preferred-glue <string>;
        provide-ixfr <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        recursion <boolean>;
        request-ixfr <boolean>;
        rfc2308-type1 <boolean>; // not yet implemented
        root-delegation-only [ exclude { <quoted_string>; ... } ];
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... };
        server <netprefix> {
                bogus <boolean>;
                edns <boolean>;
                edns-udp-size <integer>;
                keys <server_key>;
                max-udp-size <integer>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                provide-ixfr <boolean>;
                query-source <querysource4>;
                query-source-v6 <querysource6>;
                request-ixfr <boolean>;
                support-ixfr <boolean>; // obsolete
                transfer-format ( many-answers | one-answer );
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                transfers <integer>;
        };
        sig-validity-interval <integer>;
        sortlist { <address_match_element>; ... };
        suppress-initial-notify <boolean>; // not yet implemented
        topology { <address_match_element>; ... }; // not implemented
        transfer-format ( many-answers | one-answer );
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        trusted-keys { <string> <integer> <integer> <integer>
            <quoted_string>; ... };
        update-check-ksk <boolean>;
        use-alt-transfer-source <boolean>;
        zero-no-soa-ttl <boolean>;
        zero-no-soa-ttl-cache <boolean>;
d187 16
a202 1
                allow-notify { <address_match_element>; ... };
d207 7
d216 1
a216 13
                alt-transfer-source ( <ipv4_address> | * ) [ port (
                    <integer> | * ) ];
                alt-transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                check-integrity <boolean>;
                check-mx ( fail | warn | ignore );
                check-mx-cname ( fail | warn | ignore );
                check-names ( fail | warn | ignore );
                check-sibling <boolean>;
                check-srv-cname ( fail | warn | ignore );
                check-wildcard <boolean>;
                database <string>;
                delegation-only <boolean>;
a217 1
                file <quoted_string>;
a220 5
                ixfr-base <quoted_string>; // obsolete
                ixfr-from-differences <boolean>;
                ixfr-tmp-file <quoted_string>; // obsolete
                journal <quoted_string>;
                key-directory <quoted_string>;
a221 4
                masterfile-format ( text | raw );
                masters [ port <integer> ] { ( <masters> | <ipv4_address> [
                    port <integer> ] | <ipv6_address> [ port <integer> ] )
                    [ key <string> ]; ... };
d224 2
a225 2
                max-refresh-time <integer>;
                max-retry-time <integer>;
d228 3
a230 2
                max-transfer-time-in <integer>;
                max-transfer-time-out <integer>;
a231 1
                min-retry-time <integer>;
d233 35
a267 2
                notify <notifytype>;
                notify-delay <integer>;
d272 2
a273 3
                pubkey <integer> <integer> <integer>
                    <quoted_string>; // obsolete
                sig-validity-interval <integer>;
a277 9
                type ( master | slave | stub | hint | forward |
                    delegation-only );
                update-check-ksk <boolean>;
                update-policy { ( grant | deny ) <string> ( name |
                    subdomain | wildcard | self | selfsub | selfwild )
                    <string> <rrtypelist>; ... };
                use-alt-transfer-source <boolean>;
                zero-no-soa-ttl <boolean>;
                zone-statistics <boolean>;
d279 53
a331 5
        zone-statistics <boolean>;
};

zone <string> <optional_class> {
        allow-notify { <address_match_element>; ... };
d336 5
d343 22
a364 1
        alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
d367 4
d374 1
a374 1
        check-names ( fail | warn | ignore );
d376 29
a404 2
        check-srv-cname ( fail | warn | ignore );
        check-wildcard <boolean>;
d407 14
a421 1
        file <quoted_string>;
a424 5
        ixfr-base <quoted_string>; // obsolete
        ixfr-from-differences <boolean>;
        ixfr-tmp-file <quoted_string>; // obsolete
        journal <quoted_string>;
        key-directory <quoted_string>;
a425 4
        masterfile-format ( text | raw );
        masters [ port <integer> ] { ( <masters> | <ipv4_address> [ port
            <integer> ] | <ipv6_address> [ port <integer> ] ) [ key
            <string> ]; ... };
d428 2
a429 2
        max-refresh-time <integer>;
        max-retry-time <integer>;
d432 3
a434 2
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
a435 1
        min-retry-time <integer>;
a436 5
        notify <notifytype>;
        notify-delay <integer>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
d440 4
a443 5
        type ( master | slave | stub | hint | forward | delegation-only );
        update-check-ksk <boolean>;
        update-policy { ( grant | deny ) <string> ( name | subdomain |
            wildcard | self | selfsub | selfwild ) <string> <rrtypelist>;
            ... };
d445 8
d454 24
a477 1
        zone-statistics <boolean>;
d480 2
@


1.1.1.1.2.1
log
@MFC: BIND 9 and related bits.

Approved by:	re
@
text
@@


1.1.1.1.2.2
log
@MFC BIND 9.3.1 and related bmake updates

Approved by:	re (kensmith)
@
text
@a18 1
        host-statistics-max <integer>; // not implemented
@


1.1.1.1.2.3
log
@MFC import of BIND 9.3.2
@
text
@a51 1
        flush-zones-on-shutdown <boolean>;
@


