Bind 9 Administrator Reference Manual

Chapter 6. BIND 9 Conﬁguration Reference

Forwarding can also be conﬁgured on a per-domain basis, allowing for the global forwarding options to

be overridden in a variety of ways. You can set particular domains to use different forwarders, or have a

different forward only/ﬁrst behavior, or not forward at all, see Section 6.2.21.

6.2.14.3. Access Control

Access to the server can be restricted based on the IP address of the requesting system. See Section 6.1.1

for details on how to specify IP address lists.

allow-notify

Speciﬁes which hosts are allowed to notify slaves of a zone change in addition to the zone masters.

allow-notify may also be speciﬁed in the zone statement, in which case it overrides the options

allow-notify statement. It is only meaningful for a slave zone. If not speciﬁed, the default is to

process notify messages only from a zone’s master.

allow-query

Speciﬁes which hosts are allowed to ask ordinary questions. allow-query may also be speciﬁed in

the zone statement, in which case it overrides the options allow-query statement. If not speciﬁed,

the default is to allow queries from all hosts.

allow-recursion

Speciﬁes which hosts are allowed to make recursive queries through this server. If not speciﬁed, the

default is to allow recursive queries from all hosts. Note that disallowing recursive queries for a host

does not prevent the host from retrieving data that is already in the server’s cache.

allow-v6-synthesis

Speciﬁes which hosts are to receive synthetic responses to IPv6 queries as described in Section

6.2.14.13.

allow-transfer

Speciﬁes which hosts are allowed to receive zone transfers from the server. allow-transfer may also

be speciﬁed in the zone statement, in which case it overrides the options allow-transfer statement.

If not speciﬁed, the default is to allow transfers to all hosts.

blackhole

Speciﬁes a list of addresses that the server will not accept queries from or use to resolve a query.

Queries from these addresses will not be responded to. The default is none.