listen-on [port #] { list of local interface IPs ; }; # Specifies which interface(s) to listen for DNS # queries and zone- requests. This and all other # address-lists enclosed in {} must be separated # with semicolons. # Listening-port is optional. # allow-recursion { list of IP addr's/nets for # whom server will recurse ; }; # Perform recursive queries for specified IP-list, # which can consist of the word "none;" allow-transfer { list of IP addr's/nets who may receive zone-transfers, or "none" ; }; # Specify which addresses and/or networks may # receive zone-transfers should # they ask for one allow-update { IP/acl-list ; }; # Allow Dynamic DNS updates from these # IPs/ACLs/nets (or "none") allow-query IP/acl-list ; }; # Allow simple DNS queries from these IPs/ACLs/nets (or"none") version " [message to display in lieu of BIND's version number]"; # There's no legitimate reason for anyone but network admin.s to know your # BIND version-number. Some people use this # parameter to respond to version- # queries with bogus or humorous information. recursion [yes | no]; #Turn recursion on or off globally. If off, set # fetch-glue to "no" also (see below) fetch-glue [yes | no]; #Related to recursion: glue records are RRs # necessary for other RRs to make sense #(e.g., any name pointed to by a "CNAME" record # must have an "A" record somewhere) #Normally glue records can be fetched in the #course of normal queries, unless you disable # it here.