Here's a handy list of all the boot file statements for the BIND name server. Some of the statements only exist in later versions, so your server may not support them yet. The version 4 statements are labeled with a specific version number (4.9.3), or if they've been around a long time, they are labeled with a generic version number (4.X.X). The version 8 statements are labeled 8.X.X.
Changes the current working directory
directorynew-directory
directory /var/named
8.X.X options statement, directory
Declares a name server as the primary master for a zone
primarydomain-name-of-zonefile
primary movie.edu db.movie
8.X.X zone statement, type master
Declares a name server as a slave for a zone
secondarydomain-name-of-zoneip-address-list[backup-file]
secondary movie.edu 192.249.249.3 db.movie
8.X.X zone statement, type slave
Defines the name of the file from which to load the root hints (the names and addresses of the root name servers)
cachedomain-namefile
cache . db.cache
8.X.X zone statement, type hint
Defines name server(s) to send unresolved queries to
forwardersip-address-list
forwarders 192.249.249.1 192.249.249.3
8.X.X options statement, forwarders
Specifies network numbers to prefer over others
sortlistnetwork-list
sortlist 10.0.0.0
This feature is not supported in version 8.X.X
This statement is the same as the 4.9.3 statement options
forward-only and the 8.X.X options statement
forward.
Includes the contents of another file in named.boot
includefile
include bootfile.primary
8.X.X include statement
Specifies a child zone that your server should periodically get delegation information for
stubdomainip-address-list[backup-file]
stub movie.edu 192.249.249.3 stub.movie
8.X.X zone statement, type stub
options forward-onlyPrevents your name server from resolving domain names independently of a forwarder
8.X.X option statement, forward
options no-recursionPrevents your name server from performing recursive resolution of domain names
8.X.X options statement, recursion
options no-fetch-gluePrevents your name server from fetching missing glue when constructing a response
8.X.X options statement, fetch-glue
options query-logLogs all queries received by your name server
8.X.X logging statement, category queries
options
fake-iqueryTells your name server to respond to old-fashioned inverse queries with a fake answer instead of an error
8.X.X options statement, fake-iquery
limit transfers-inRestricts the total number of zone transfers your name server will attempt at any one time
8.X.X options statement, transfers-in
limit transfers-per-nsRestricts the number of zone transfers your name server will request from any one server simultaneously
8.X.X options statement, transfers-per-ns
limit datasizeIncreases the size of the data segment named uses (only works on some operating systems)
8.X.X options statement, datasize
Restricts zone transfers from your name server to a list of IP addresses or networks
xfrnetsip-address-or-network-list
xfrnets 15.0.0.0 128.32.0.0
8.X.X options statement, allow-transfer
Tells your name server not to query a list of name servers that are known to give bad answers
bogusnsip-address-list
bogusns 15.255.152.4
8.X.X server statement, bogus
Modifies the name-checking feature
check-namesprimary/secondary/responsefail/warn/ignore
check-names primary ignore
8.X.X options statement, check-names
Creates a named address match list
acl name {
address_match_list
};Inserts the specified file at the point that the
include statement is encountered
include path_name;
Defines a key ID which can be used in a server statement
to associate an authentication method with a particular name server.
The key statement is intended for future use by the server. In version
8.1.1, it is checked for syntax but is otherwise ignored
key key_id {
algorithm algorithm_id;
secret secret_string;
};Defines the logging behavior
logging {
[ channel channel_name {
( file path_name
[ versions ( number | unlimited ) ]
[ size size_spec ]
| syslog ( kern | user | mail | daemon | auth | syslog | lpr |
news | uucp | cron | authpriv | ftp |
local0 | local1 | local2 | local3 |
local4 | local5 | local6 | local7 )
| null );
[ severity ( critical | error | warning | notice |
info | debug [ level ] | dynamic ); ]
[ print-category yes_or_no; ]
[ print-severity yes_or_no; ]
[ print-time yes_or_no; ]
}; ]
[ category category_name {
channel_name; [ channel_name; ... ]
}; ]
...
};Sets up global options
options {
[ directory path_name; ]
[ named-xfer path_name; ]
[ dump-file path_name; ]
[ pid-file path_name; ]
[ statistics-file path_name; ]
[ auth-nxdomain yes_or_no; ]
[ fake-iquery yes_or_no; ]
[ fetch-glue yes_or_no; ]
[ multiple-cnames yes_or_no; ]
[ notify yes_or_no; ]
[ recursion yes_or_no; ]
[ forward ( only | first ); ]
[ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ]
[ check-names ( master | slave | response ) ( warn | fail | ignore);]
[ allow-query { address_match_list }; ]
[ allow-transfer { address_match_list }; ]
[ listen-on [ port ip_port ] { address_match_list }; ]
[ query-source [ address ( ip_addr | * ) ] [ port ( ip_port | * ) ];]
[ max-transfer-time-in number; ]
[ transfer-format ( one-answer | many-answers ); ]
[ transfers-in number; ]
[ transfers-out number; ]
[ transfers-per-ns number; ]
[ coresize size_spec ; ]
[ datasize size_spec ; ]
[ files size_spec ; ]
[ stacksize size_spec ; ]
[ cleaning-interval number; ]
[ interface-interval number; ]
[ statistics-interval number; ]
[ topology { address_match_list }; ]
};Defines the characteristics to be associated with a remote name server
server ip_addr {
[ bogus yes_or_no; ]
[ transfers number; ]
[ transfer-format ( one-answer | many-answers
); ]
[ keys { key_id [key_id ... ] }; ]
};zone domain_name [ ( in | hs | hesiod | chaos )
] {
type master;
file path_name;
[ check-names ( warn | fail | ignore ); ]
[ allow-update { address_match_list }; ]
[ allow-query { address_match_list }; ]
[ allow-transfer { address_match_list }; ]
[ notify yes_or_no; ]
[ also-notify { ip_addr; [ ip_addr; ... ] };
};
zone domain_name [ ( in | hs | hesiod | chaos )
] {
type ( slave | stub );
[ file path_name; ]
masters { ip_addr; [ ip_addr; ... ] };
[ check-names ( warn | fail | ignore ); ]
[ allow-update { address_match_list }; ]
[ allow-query { address_match_list }; ]
[ allow-transfer { address_match_list }; ]
[ max-transfer-time-in number; ]
[ notify yes_or_no; ]
[ also-notify { ip_addr; [ ip_addr; ... ] };
};
zone . [ ( in | hs | hesiod | chaos ) ] {
type hint;
file path_name;
[ check-names ( warn | fail | ignore ); ]
};