Here's a handy list of all the boot file statements for the BIND name server. Some of the statements only exist in later versions, so your server may not support them yet. The version 4 statements are labeled with a specific version number (4.9.3), or if they've been around a long time, they are labeled with a generic version number (4.X.X). The version 8 statements are labeled 8.X.X.
Changes the current working directory
directorynew-directory
directory /var/named
8.X.X
options
statement,
directory
Declares a name server as the primary master for a zone
primarydomain-name-of-zone
file
primary movie.edu db.movie
8.X.X
zone
statement,
type master
Declares a name server as a slave for a zone
secondarydomain-name-of-zone
ip-address-list
[backup-file
]
secondary movie.edu 192.249.249.3 db.movie
8.X.X
zone
statement,
type slave
Defines the name of the file from which to load the root hints (the names and addresses of the root name servers)
cachedomain-name
file
cache . db.cache
8.X.X
zone
statement,
type hint
Defines name server(s) to send unresolved queries to
forwardersip-address-list
forwarders 192.249.249.1 192.249.249.3
8.X.X
options
statement,
forwarders
Specifies network numbers to prefer over others
sortlistnetwork-list
sortlist 10.0.0.0
This feature is not supported in version 8.X.X
This statement is the same as the 4.9.3 statement
options forward-only
and the 8.X.X
options
statement
forward
.
Includes the contents of another file in named.boot
includefile
include bootfile.primary
8.X.X
include
statement
Specifies a child zone that your server should periodically get delegation information for
stubdomain
ip-address-list
[backup-file
]
stub movie.edu 192.249.249.3 stub.movie
8.X.X
zone
statement,
type stub
options forward-only
Prevents your name server from resolving domain names independently of a forwarder
8.X.X
option
statement,
forward
options no-recursion
Prevents your name server from performing recursive resolution of domain names
8.X.X
options
statement,
recursion
options no-fetch-glue
Prevents your name server from fetching missing glue when constructing a response
8.X.X
options
statement,
fetch-glue
options query-log
Logs all queries received by your name server
8.X.X
logging
statement,
category queries
options
fake-iquery
Tells your name server to respond to old-fashioned inverse queries with a fake answer instead of an error
8.X.X
options
statement,
fake-iquery
limit transfers-in
Restricts the total number of zone transfers your name server will attempt at any one time
8.X.X
options
statement,
transfers-in
limit transfers-per-ns
Restricts the number of zone transfers your name server will request from any one server simultaneously
8.X.X
options
statement,
transfers-per-ns
limit datasize
Increases the size of the data segment named uses (only works on some operating systems)
8.X.X
options
statement,
datasize
Restricts zone transfers from your name server to a list of IP addresses or networks
xfrnetsip-address-or-network-list
xfrnets 15.0.0.0 128.32.0.0
8.X.X
options
statement,
allow-transfer
Tells your name server not to query a list of name servers that are known to give bad answers
bogusnsip-address-list
bogusns 15.255.152.4
8.X.X
server
statement,
bogus
Modifies the name-checking feature
check-namesprimary/secondary/response
fail/warn/ignore
check-names primary ignore
8.X.X
options
statement,
check-names
Creates a named address match list
acl name { address_match_list };
Inserts the specified file at the point that the
include
statement is encountered
include path_name;
Defines a key
ID
which can be used in a
server
statement to associate an authentication method with a particular name server. The
key
statement is intended for future use by the server. In version 8.1.1, it is checked for syntax but is otherwise ignored
key key_id { algorithm algorithm_id; secret secret_string; };
Defines the logging behavior
logging { [ channel channel_name { ( file path_name [ versions ( number | unlimited ) ] [ size size_spec ] | syslog ( kern | user | mail | daemon | auth | syslog | lpr | news | uucp | cron | authpriv | ftp | local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7 ) | null ); [ severity ( critical | error | warning | notice | info | debug [ level ] | dynamic ); ] [ print-category yes_or_no; ] [ print-severity yes_or_no; ] [ print-time yes_or_no; ] }; ] [ category category_name { channel_name; [ channel_name; ... ] }; ] ... };
Sets up global options
options { [ directory path_name; ] [ named-xfer path_name; ] [ dump-file path_name; ] [ pid-file path_name; ] [ statistics-file path_name; ] [ auth-nxdomain yes_or_no; ] [ fake-iquery yes_or_no; ] [ fetch-glue yes_or_no; ] [ multiple-cnames yes_or_no; ] [ notify yes_or_no; ] [ recursion yes_or_no; ] [ forward ( only | first ); ] [ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ] [ check-names ( master | slave | response ) ( warn | fail | ignore);] [ allow-query { address_match_list }; ] [ allow-transfer { address_match_list }; ] [ listen-on [ port ip_port ] { address_match_list }; ] [ query-source [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ];] [ max-transfer-time-in number; ] [ transfer-format ( one-answer | many-answers ); ] [ transfers-in number; ] [ transfers-out number; ] [ transfers-per-ns number; ] [ coresize size_spec ; ] [ datasize size_spec ; ] [ files size_spec ; ] [ stacksize size_spec ; ] [ cleaning-interval number; ] [ interface-interval number; ] [ statistics-interval number; ] [ topology { address_match_list }; ] };
Defines the characteristics to be associated with a remote name server
server ip_addr { [ bogus yes_or_no; ] [ transfers number; ] [ transfer-format ( one-answer | many-answers ); ] [ keys { key_id [key_id ... ] }; ] };
zone domain_name [ ( in | hs | hesiod | chaos ) ] { type master; file path_name; [ check-names ( warn | fail | ignore ); ] [ allow-update { address_match_list }; ] [ allow-query { address_match_list }; ] [ allow-transfer { address_match_list }; ] [ notify yes_or_no; ] [ also-notify { ip_addr; [ ip_addr; ... ] }; }; zone domain_name [ ( in | hs | hesiod | chaos ) ] { type ( slave | stub ); [ file path_name; ] masters { ip_addr; [ ip_addr; ... ] }; [ check-names ( warn | fail | ignore ); ] [ allow-update { address_match_list }; ] [ allow-query { address_match_list }; ] [ allow-transfer { address_match_list }; ] [ max-transfer-time-in number; ] [ notify yes_or_no; ] [ also-notify { ip_addr; [ ip_addr; ... ] }; }; zone . [ ( in | hs | hesiod | chaos ) ] { type hint; file path_name; [ check-names ( warn | fail | ignore ); ] };