7. List of Statements
This section defines in summary format all the statements available in BIND 9.3.0 (updated for some 9.10.x values) named.conf. This list is in alphabetic order to make it useful. Don't you just hate it when you spend two minutes looking for something that should take two seconds. The entries enclosed in square brackets following the statement, and where present, specify the clause or clauses in which the statement may be used. Progressively we are adding the default value in bold where it is clear and unambiguous.
Bind 9 Features by Release (9.8 to 9.10)
additional-from-auth (yes | no) ; [ Opt, View ]
additional-from-cache (yes | no) ; [ Opt, View ]
algorithm "algorithm_name"; [ Key ]
allow-notify { address_match_list }; [ Opt, View, Zone ]
allow-query { address_match_list }; [ Opt, View, Zone ]
allow-query-on { address_match_list }; [ Opt, View, Zone ]
allow-query-cache { address_match_list }; [ Opt, View ]
allow-query-cache-on { address_match_list }; [ Opt, View ]
allow-recursion { address_match_list }; [ Opt, View ]
allow-recursion-on { address_match_list }; [ Opt, View ]
allow-transfer { address_match_list }; [ Opt, View, Zone]
allow-update { address_match_list }; [Opt, View, Zone]
allow-update-forwarding { address_match_list }; [ Opt, View, Zone]
allow-v6-synthesis { address_match_list }; Obsolete
also-notify [port gp-num] [dscp gd-num] { (masters-list|IP-address )[port p-num] [dscp d-num]
[key key-name] ; [... ;] }; [ Opt, View, Zone ] [9.9+]
also-notify { ip_addr [port ip_port] ; ... ] }; [ Opt, View, Zone ] [Pre 9.9]
alt-transfer-source ( ipv4 | * ) [ port ( integer | * )]; [ Opt, View, Zone ]
alt-transfer-source-v6 ( ipv6 | * ) [ port ( integer | * ) ]; [ Opt, View, Zone ]
auth-nxdomain (yes | no); [ Opt, View ]
avoid-v4-udp-ports { port; ... }; [ Opt ]
avoid-v6-udp-ports { port; ... }; [ Opt ]
blackhole { address_match_list }; [ Opt ]
bogus ( yes | no ); [ Server ]
cache-file DEVELOPER ONLY STATEMENT
category category_name { channel_name; ... }; [ logging ]
channel channel_name { channel_spec }; [ logging ]
check-names ( master | slave | response ) ( fail | warn | ignore ); [ Opt, view ]
check-names ( fail | warn | ignore ); [ Zone ]
cleaning-interval number; [ Opt, View ]
coresize size_in_bytes ; [ Opt ]
database "database-name params"; [ Zone ]
datasize size_spec ; [ Opt ]
deallocate-on-exit yes_or_no; IGNORED - DEFAULT BEHAVIOUR IN BIND 9
delegation-only ( yes | no ) ; [ Zone ]
deny-answer-addresses { address_match_list }
[ except-from { name_list } ]; [ Opt ]
deny-answer-aliases { name_list }
[ except-from { name_list } ]; [ Opt ]
dialup dialup_options; [ Opt, View, Zone ]
directory path_name; [ Opt ]
disable-algorithms domain { algorithm ; ... }; [ Opt ]
disable-ds-digests domain { digest ; ... }; [ Opt ]
disable-empty-zone zone_name; [ Opt, View ]
dnssec-enable ( yes | no ); [ Opt, View ]
dnssec-lookaside domain trust-anchor domain; [ Opt, View ]
dnssec-must-be-secure domain ( yes | no); [ Opt, View ]
dnssec-validation ( yes | no ); [ Opt, View ]
dual-stack-servers [ port p_num ] { ( "id" [port p_num] |
ipv4 [port p_num] | ipv6 [port p_num] ); ... }; [ Opt, View ]
dump-file path_name; [ Opt ]
edns ( yes | no); [ server ]
edns-udp-size size_in_bytes; [ Opt, View ]
empty-contact name; [ Opt, View ]
empty-server name; [ Opt, View ]
empty-zones-enable yes | no; [ Opt, View ]
fake-iquery yes_or_no; ] IGNORED IN BIND 9
fetch-glue yes_or_no; ] OBSOLETE IN BIND 9
file "file_name" ; [ Zone ]
files number_of_files ; [ Opt, View ]
forward ( only | first ); [ Opt, View, Zone ]
forwarders { ipv4_addr | ipv6_addr [port ip_port] ; ... ] }; [ Opt, View, Zone ]
has-old-clients yes | no; IGNORED IN BIND 9
heartbeat-interval minutes; [ Opt, View ]
host-statistics yes_or_no; NOT YET IMPLEMENTED IN BIND 9
hostname hostname_string; ; [ Opt, View ]
in-view view-name; [ Zone ] [Def=N/A]
inet ( ip_addr | * ) [ port ip_port ] allow { address_match_list }
keys { key_list }; [ controls ]
interface-interval number; [ Opt ]
ixfr-from-differences ( yes | no); [ Opt, View, Zone ]
ixfr-tmp-file -- ; OBSOLETE IN BIND 9
key-directory path_name; [ Opt, View, Zone ]
lame-ttl number; [ Opt, View ]
listen-on [ port ip_port ] { address_match_list }; [Opt, lwres ]
listen-on-v6 [ port ip_port ] { address_match_list }; [ Opt ]
maintain-ixfr-base ( yes | no ); OBSOLETE IN BIND 9
masterfile-format (text|raw|map); [ Opt, View, Zone ]
masters [port pg-port] [dscp d-num] {
(masters-list|ip-addr) [port p-port] [dscp d-num] [key key-name] ) ; [...] } ; ] [ Zone ]
match-clients { address_match_list } ; [ View ]
match-destinations { address_match_list } ; [ View ]
match-mapped-addresses ( yes | no ); [ Opt ]
match-recursive-only { address_match_list } ; [ View ]
max-cache-size size_in_bytes ; [ Opt, View ]
max-cache-ttl seconds; [ Opt, View ]
max-ixfr-log-size number; OBSOLETE IN BIND 9
max-journal-size size_in_bytes; [ Opt, View, Zone ]
max-ncache-ttl seconds; [ Opt, View ]
max-refresh-time seconds ; [ Opt, View, Zone ]
max-retry-time seconds ; [ Opt, View, Zone ]
max-rsa-exponent-size bits; [ Opt ]
max-transfer-idle-in minutes; [ Opt, View, Zone ]
max-transfer-idle-out minutes; [ Opt, View, Zone ]
max-transfer-time-in minutes; [ Opt, View, Zone ]
max-transfer-time-out minutes; [ Opt, View, Zone ]
memstatistics-file "path_name"; [ Opt ]
min-refresh-time seconds ; [ Opt, View, Zone ]
min-retry-time seconds ; [ Opt, View, Zone ]
min-roots number; NOT YET IMPLEMENTED IN BIND 9
minimal-responses ( yes | no ) ; [ Opt, View ]
multi-master ( yes | no ) ; [ Opt, View, Zone ]
multiple-cnames (yes | no); IGNORED BY BIND 9
named-xfer path_name; OBSOLETE IN BIND 9
ndots number ; [ lwres ]
notify ( yes | no | explicit ); [ Opt, View, Zone ]
notify-source (ip4_addr | *) [port ip_port] ; [ Opt, View, Zone ]
notify-source-v6 (ip6_addr | *) [port ip_port] ; [ Opt, View, Zone ]
pid-file "path_to_file"; [ Opt ]
port ip_port; [ Opt ]
preferred-glue ( A | AAAA) ; [ Opt, View ]
prefetch expiry-ttl-seconds [threshold-ttl-secs] ; [ Opt ]
provide-ixfr ( yes | no) ; [ Opt, View, server ]
pubkey ; OBSOLETE IN BIND 9
query-source [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ]; [ Opt, View ]
query-source-v6 [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ]; [ Opt, View ]
querylog ( yes | no ); [ Opt ]
random-device "device_name" ; [ Opt ]
rate-limit {
[ domain domain ; ]
[ responses-per-second [size number] [ratio fixedpoint] number ; ]
[ referrals-per-second number ; ]
[ nodata-per-second number ; ]
[ nxdomains-per-second number ; ]
[ errors-per-second number ; ]
[ all-per-second number ; ]
[ window number ; ]
[ log-only yes_or_no ; ]
[ qps-scale number ; ]
[ ipv4-prefix-length number ; ]
[ ipv6-prefix-length number ; ]
[ slip number ; ]
[ exempt-clients { address_match_list } ; ]
[ max-table-size number ; ]
[ min-table-size number ; ]
}; [ opt, View ]
recursing-file "path_to_file"; [ Opt ]
recursion ( yes | no ); [ Opt, View ]
recursive-clients number; [ Opt ]
request-ixfr ( yes | no ); [ Opt, View, server ]
resolver-query-timeout seconds ; [ Opt ]
response-policy { zone zone-name
[ policy (given|disabled|passthru|drop|nxdomain|nodata|tcp-only| cname domain-name)
[ recursive-only yes_or_no ] [ max-policy-ttl number ] ; }
[ recursive-only yes_or_no ]
[ max-policy-ttl number ]
[ break-dnssec yes_or_no ]
[ min-ns-dots number ]
[ qname-wait-recurse yes_or_no ] ; [ opt, View ]
rfc2308-type1 ( yes | no ); NOT YET IMPLEMENTED IN BIND 9
root-delegation-only [ exclude { namelist } ] ; [ Opt, View ]
rrset-order { order_spec ; [ order_spec ; ... ] ); [ Opt, View ]
search { domain_name ; [ domain_name ; ... ] }; [ lwres ]
secret secret_string ; [ key ]
serial-queries number; NOT IMPLEMENTED IN BIND 9
serial-query-rate number; [ Opt ]
sig-validity-interval number ; [ Opt, View, Zone ]
server-addresses server-addresses {ip-address; [...;]}; [ Zone ] [Def=N/A]
server-names { dom-name; [ ...; ] }; [ Zone ] [Def=N/A]
server-id "server_id"; [ Opt ]
sortlist { address_match_list }; [ Opt, View ]
stacksize size_in_bytes ; [ Opt ]
statistics-file path_name; [ Opt ]
statistics-interval number; NOT YET IMPLEMENTED IN BIND9
support-ixfr; OBSOLETE IN BIND9
suppress-initial-notify NOT YET IMPLEMENTED IN BIND9
sig-validity-interval days ; [ Opt, View, Zone ]
tcp-clients number; [ Opt ]
tcp-listen-queue number; [ Opt ]
tkey-dhkey key_name key_tag; [ Opt ]
tkey-domain domainname; [ Opt ]
tkey-gssapi-credential domainname; [ Opt ]
topology { address_match_list }; NOT YET IMPLEMENTED IN BIND 9
transfer-format ( one-answer | many-answers ); [ Opt, View, server ]
transfer-source (ip4_addr | *) [port ip_port] ; [ Opt, View, Zone ]
transfer-source-v6 (ip6_addr | *) [port ip_port] ; [ Opt, View, Zone ]
transfers number ; [ server ]
transfers-in number; [ Opt ]
transfers-out number; [ Opt ]
transfers-per-ns number; [ Opt ]
treat-cr-as-space yes_or_no ; OBSOLETE BIND 9 READS BOTH FORMATS
type zone_type; [ Zone ]
unix ; NOT YET IMPLEMENTED IN BIND 9
update-policy { update_policy_rule [...] }; [ Zone ]
use-alt-transfer-source ( yes | no ); [ Opt, View, Zone ]
use-v4-udp-ports [range begin end;]
use-v6-udp-ports [range begin end;]
use-id-pool ( yes | no ); OBSOLETE IIN BIND 9
use-ixfr ( yes | no ) ; OBSOLETE IN BIND 9
view view_name ; [ lwres ]
version version_string; [ Opt ]
zone-statistics ( yes | no ) ; [ Opt, View, Zone ]
Problems, comments, suggestions, corrections (including broken links) or something to add? Please take the time from a busy life to 'mail us' (at top of screen), the webmaster (below) or info-support at zytrax. You will have a warm inner glow for the rest of the day.
