1zone <string> [ <class> ] { 2 type ( master | primary ); 3 allow-query { <address_match_element>; ... }; 4 allow-query-on { <address_match_element>; ... }; 5 allow-transfer { <address_match_element>; ... }; 6 allow-update { <address_match_element>; ... }; 7 also-notify [ port <integer> ] [ dscp <integer> ] { ( <remote-servers> | <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ] [ tls <string> ]; ... }; 8 alt-transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [ dscp <integer> ]; 9 alt-transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ] [ dscp <integer> ]; 10 auto-dnssec ( allow | maintain | off ); 11 check-dup-records ( fail | warn | ignore ); 12 check-integrity <boolean>; 13 check-mx ( fail | warn | ignore ); 14 check-mx-cname ( fail | warn | ignore ); 15 check-names ( fail | warn | ignore ); 16 check-sibling <boolean>; 17 check-spf ( warn | ignore ); 18 check-srv-cname ( fail | warn | ignore ); 19 check-wildcard <boolean>; 20 database <string>; 21 dialup ( notify | notify-passive | passive | refresh | <boolean> ); 22 dlz <string>; 23 dnskey-sig-validity <integer>; 24 dnssec-dnskey-kskonly <boolean>; 25 dnssec-loadkeys-interval <integer>; 26 dnssec-policy <string>; 27 dnssec-secure-to-insecure <boolean>; 28 dnssec-update-mode ( maintain | no-resign ); 29 file <quoted_string>; 30 forward ( first | only ); 31 forwarders [ port <integer> ] [ dscp <integer> ] { ( <ipv4_address> | <ipv6_address> ) [ port <integer> ] [ dscp <integer> ]; ... }; 32 inline-signing <boolean>; 33 ixfr-from-differences <boolean>; 34 journal <quoted_string>; 35 key-directory <quoted_string>; 36 masterfile-format ( raw | text ); 37 masterfile-style ( full | relative ); 38 max-ixfr-ratio ( unlimited | <percentage> ); 39 max-journal-size ( default | unlimited | <sizeval> ); 40 max-records <integer>; 41 max-transfer-idle-out <integer>; 42 max-transfer-time-out <integer>; 43 max-zone-ttl ( unlimited | <duration> ); 44 notify ( explicit | master-only | primary-only | <boolean> ); 45 notify-delay <integer>; 46 notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [ dscp <integer> ]; 47 notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ] [ dscp <integer> ]; 48 notify-to-soa <boolean>; 49 parental-agents [ port <integer> ] [ dscp <integer> ] { ( <remote-servers> | <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ] [ tls <string> ]; ... }; 50 parental-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ] [ dscp <integer> ]; 51 parental-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ] [ dscp <integer> ]; 52 serial-update-method ( date | increment | unixtime ); 53 sig-signing-nodes <integer>; 54 sig-signing-signatures <integer>; 55 sig-signing-type <integer>; 56 sig-validity-interval <integer> [ <integer> ]; 57 update-check-ksk <boolean>; 58 update-policy ( local | { ( deny | grant ) <string> ( 6to4-self | external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild | subdomain | tcp-self | wildcard | zonesub ) [ <string> ] <rrtypelist>; ... }; 59 zero-no-soa-ttl <boolean>; 60 zone-statistics ( full | terse | none | <boolean> ); 61}; 62