1 zone <string> [ <class> ] { 2 type secondary; 3 allow-notify { <address_match_element>; ... }; 4 allow-query { <address_match_element>; ... }; 5 allow-query-on { <address_match_element>; ... }; 6 allow-transfer [ port <integer> ] [ transport <string> ] { <address_match_element>; ... }; 7 allow-update-forwarding { <address_match_element>; ... }; 8 also-notify [ port <integer> ] [ source ( <ipv4_address> | * ) ] [ source-v6 ( <ipv6_address> | * ) ] { ( <server-list> | <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ] [ tls <string> ]; ... }; 9 check-names ( fail | warn | ignore ); 10 checkds ( explicit | <boolean> ); 11 database <string>; 12 dialup ( notify | notify-passive | passive | refresh | <boolean> ); // deprecated 13 dlz <string>; 14 dnskey-sig-validity <integer>; // obsolete 15 dnssec-dnskey-kskonly <boolean>; // obsolete 16 dnssec-loadkeys-interval <integer>; 17 dnssec-policy <string>; 18 dnssec-update-mode ( maintain | no-resign ); // obsolete 19 file <quoted_string>; 20 forward ( first | only ); 21 forwarders [ port <integer> ] [ tls <string> ] { ( <ipv4_address> | <ipv6_address> ) [ port <integer> ] [ tls <string> ]; ... }; 22 inline-signing <boolean>; 23 ixfr-from-differences <boolean>; 24 journal <quoted_string>; 25 key-directory <quoted_string>; 26 masterfile-format ( raw | text ); 27 masterfile-style ( full | relative ); 28 max-ixfr-ratio ( unlimited | <percentage> ); 29 max-journal-size ( default | unlimited | <sizeval> ); 30 max-records <integer>; 31 max-records-per-type <integer>; 32 max-refresh-time <integer>; 33 max-retry-time <integer>; 34 max-transfer-idle-in <integer>; 35 max-transfer-idle-out <integer>; 36 max-transfer-time-in <integer>; 37 max-transfer-time-out <integer>; 38 max-types-per-name <integer>; 39 min-refresh-time <integer>; 40 min-retry-time <integer>; 41 min-transfer-rate-in <integer> <integer>; 42 multi-master <boolean>; 43 notify ( explicit | master-only | primary-only | <boolean> ); 44 notify-defer <integer>; 45 notify-delay <integer>; 46 notify-source ( <ipv4_address> | * ); 47 notify-source-v6 ( <ipv6_address> | * ); 48 notify-to-soa <boolean>; 49 nsec3-test-zone <boolean>; // test only 50 parental-agents [ port <integer> ] [ source ( <ipv4_address> | * ) ] [ source-v6 ( <ipv6_address> | * ) ] { ( <server-list> | <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ] [ tls <string> ]; ... }; 51 parental-source ( <ipv4_address> | * ); 52 parental-source-v6 ( <ipv6_address> | * ); 53 primaries [ port <integer> ] [ source ( <ipv4_address> | * ) ] [ source-v6 ( <ipv6_address> | * ) ] { ( <server-list> | <ipv4_address> [ port <integer> ] | <ipv6_address> [ port <integer> ] ) [ key <string> ] [ tls <string> ]; ... }; 54 request-expire <boolean>; 55 request-ixfr <boolean>; 56 sig-signing-nodes <integer>; 57 sig-signing-signatures <integer>; 58 sig-signing-type <integer>; 59 sig-validity-interval <integer> [ <integer> ]; // obsolete 60 transfer-source ( <ipv4_address> | * ); 61 transfer-source-v6 ( <ipv6_address> | * ); 62 try-tcp-refresh <boolean>; 63 update-check-ksk <boolean>; // obsolete 64 zero-no-soa-ttl <boolean>; 65 zone-statistics ( full | terse | none | <boolean> ); 66 }; 67