HP-UX Reference (11i v3 07/02) - 4 File Formats (vol 8)

n
named.conf(4) named.conf(4)
(BIND 9.3)
specified should be an absolute path.
disable-algorithms
Disable the specified DNSSEC algorithms at and below the specified name. Multiple
disable-algorithms
statements are allowed. Only the most specific is applied.
dnssec-lookaside
When set, dnssec-lookaside
provides the validator with an alternate method to vali-
date DNSKEY records at the top of a zone. When a DNSKEY is at or below a domain
specified by the deepest
dnssec-lookaside
, and the normal DNSSEC validation has
left the key untrusted, the
trust-anchor will be appended to the key name and a DLV
record will be looked up to see if it can validate the key. If the DLV record validates a
DNSKEY (similar to the way a DS record does it), the DNSKEY RRset is deemed to be
trusted.
dnssec-must-be-secure
Specify hierarchies which must be or may not be secure (signed and validated). If
yes,
named will only accept answers if they are secure. If
no, normal DNSSEC validation
applies and insecure answers are accepted. The specified domain must be under a trusted
key, or
dnssec-lookaside
must be active.
dump-file The path name of the file to which the server dumps the database with rndc dumpdb
.
The default is
named_dump.db.
key-directory
The directory where the public and private key files should be found, if it is not the working
directory. The specified directory must be an absolute path.
memstatistics-file
The path name of the file to which the server writes the memory usage statistics. The
default is
named.memstats
.
pid-file The path name of the file in which the server writes its process ID. The default path name
is
/var/run/named.pid
. The pid-file is used by programs that need to send sig-
nals to the running name server.
Specifying
pid-file none ; disables the use of a PID file; no file is written and any
existing file is removed. Note that none is a keyword, not a file name, and therefore is not
enclosed in quotation marks.
port The UDP/TCP port number the server uses for receiving and sending DNS protocol traffic.
The default is 53. This option is mainly intended for server testing; a server using a port
other than 53 will not be able to communicate with the global DNS.
preferred-glue
If specified, the listed type (A or AAAA) will be emitted before other glue in the additional
section of a query response. The default is not to prefer any type (NONE). ("Glue" is a
record that is created as part of a delegation.)
random-device
The source of entropy (random data) to be used by the server. Entropy is primarily needed
for DNSSEC operations, This option specifies the device (or file) from which to read
entropy. If this is a file, operations requiring entropy will fail when the file has been
exhausted. The default value is
/dev/random (or the equivalent) when present, and
none otherwise. The random-device option takes effect during the initial configuration
load at server startup time and is ignored on subsequent reloads.
root-delegation-only
Turn on enforcement of delegation-only in top level domains (TLD) and root zones,
with an optional exclude list.
Note: Some TLDs are not delegation-only (for example, DE, LV, US and MUSEUM).
options {
root-delegation-only exclude { "de"; "lv"; "us"; "museum"; };
};
statistics-file
The path name of the file in which the server appends statistics using rndc stats. The
default is named.stats in the server’s current directory. The file format is described in
244 Hewlett-Packard Company − 12 − HP-UX 11i Version 3: February 2007