diff --git a/CHANGES b/CHANGES index fb49e88fed..4525d82db3 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,8 @@ + 946. [cleanup] doc/misc/options is now machine-generated from the + configuration parser syntax tables, and therefore + more likely to be correct. + 945. [func] Add the new view-specific options "match-destinations" and "match-recursive-only". diff --git a/configure.in b/configure.in index ab98ae9ad8..06023d628b 100644 --- a/configure.in +++ b/configure.in @@ -18,7 +18,7 @@ AC_DIVERT_PUSH(AC_DIVERSION_NOTICE)dnl esyscmd([sed "s/^/# /" COPYRIGHT])dnl AC_DIVERT_POP()dnl -AC_REVISION($Revision: 1.284 $) +AC_REVISION($Revision: 1.285 $) AC_INIT(lib/dns/name.c) AC_PREREQ(2.13) @@ -1694,6 +1694,7 @@ AC_OUTPUT( doc/arm/nominum-docbook-html.dsl doc/arm/nominum-docbook-print.dsl doc/arm/validate.sh + doc/misc/Makefile docutil/docbook2man-wrapper.sh isc-config.sh ) diff --git a/doc/Makefile.in b/doc/Makefile.in index d88d9733e1..1bf0c31ffe 100644 --- a/doc/Makefile.in +++ b/doc/Makefile.in @@ -13,7 +13,7 @@ # NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION # WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. -# $Id: Makefile.in,v 1.3 2001/01/09 21:46:33 bwelling Exp $ +# $Id: Makefile.in,v 1.4 2001/07/26 21:31:11 gson Exp $ # This Makefile is a placeholder. It exists merely to make # sure that its directory gets created in the object directory @@ -23,7 +23,7 @@ srcdir = @srcdir@ VPATH = @srcdir@ top_srcdir = @top_srcdir@ -SUBDIRS = arm +SUBDIRS = arm misc TARGETS = @BIND9_MAKE_RULES@ diff --git a/doc/misc/Makefile.in b/doc/misc/Makefile.in new file mode 100644 index 0000000000..aec121ed62 --- /dev/null +++ b/doc/misc/Makefile.in @@ -0,0 +1,36 @@ +# Copyright (C) 2001 Internet Software Consortium. +# +# Permission to use, copy, modify, and distribute this software for any +# purpose with or without fee is hereby granted, provided that the above +# copyright notice and this permission notice appear in all copies. +# +# THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM +# DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL +# INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, +# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING +# FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, +# NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION +# WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + +# $Id: Makefile.in,v 1.1 2001/07/26 21:31:12 gson Exp $ + +srcdir = @srcdir@ +VPATH = @srcdir@ +top_srcdir = @top_srcdir@ + +@BIND9_MAKE_RULES@ + +PERL = @PERL@ + +MANOBJS = options + +doc man:: ${MANOBJS} + +docclean manclean maintainer-clean:: + rm -f options + +options: + ../../bin/tests/cfg_test --named --grammar | \ + ${PERL} ${srcdir}/format-options.pl >options || \ + rm -f options diff --git a/doc/misc/format-options.pl b/doc/misc/format-options.pl new file mode 100644 index 0000000000..4a7e9a1983 --- /dev/null +++ b/doc/misc/format-options.pl @@ -0,0 +1,36 @@ +#!/usr/bin/perl +# +# Copyright (C) 2001 Internet Software Consortium. +# +# Permission to use, copy, modify, and distribute this software for any +# purpose with or without fee is hereby granted, provided that the above +# copyright notice and this permission notice appear in all copies. +# +# THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM +# DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL +# INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, +# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING +# FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, +# NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION +# WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + +# $Id: format-options.pl,v 1.1 2001/07/26 21:31:12 gson Exp $ + +print <) { + s/\t/ /g; + if (length >= 79) { + m!^( *)!; + my $indent = $1; + s!^(.{0,75}) (.*)$!\1\n$indent \2!; + } + print; +} diff --git a/doc/misc/options b/doc/misc/options index 5f81371724..e2e71c802e 100644 --- a/doc/misc/options +++ b/doc/misc/options @@ -1,294 +1,286 @@ -Copyright (C) 2000, 2001 Internet Software Consortium. -See COPYRIGHT in the source root or http://isc.org/copyright.html for terms. - -$Id: options,v 1.69 2001/06/14 19:29:33 gson Exp $ - -This is a summary of the implementation status of the various named.conf -options in BIND 9. - -Legend: - - Yes Implemented in this release. - - No Not implemented, may be implemented in a later release. - - Obsolete Obsolete, not applicable to BIND 9, or just evil. - Will not be implemented. - - * New in BIND 9. - - + The option is now always enabled. - - - The option is now always disabled. - - % The default value has changed since BIND 8. - - & The option has been extended since BIND 8. - - @ Semantics of certain pathological address match lists, in - particular those involving double negation, have changed. - The new semantics are generally safer. IPv6 addresses - are supported, but the predefined ACLs "localhost" and - "localnets" match IPv4 addresses only. - - # BIND 9 accepts both LF and CRLF as end-of-line markers. - - $ Stub zones are partially supported. They no longer - inject NS records into their parent zones, but can still - be used as a way of forcing a domain to be resolved using - a particular set of name servers. +This is a summary of the named.conf options supported by BIND 9. options { - [ version version_string; ] Yes - [ directory path_name; ] Yes - [ named-xfer path_name; ] Obsolete - [ dump-file path_name; ] Yes - [ memstatistics-file path_name; ] No - [ pid-file path_name; ] Yes - [ statistics-file path_name; ] Yes - [ auth-nxdomain yes_or_no; ] Yes% - [ deallocate-on-exit yes_or_no; ] Obsolete+ - [ dialup yes_or_no | notify | notify-passive | - refresh | passive; ] Yes& - [ fake-iquery yes_or_no; ] Obsolete- - [ fetch-glue yes_or_no; ] Obsolete - [ has-old-clients yes_or_no; ] Obsolete - [ host-statistics yes_or_no; ] No - [ multiple-cnames yes_or_no; ] Obsolete- - [ notify yes_or_no | explicit; ] Yes& - [ recursion yes_or_no; ] Yes - [ rfc2308-type1 yes_or_no; ] No - [ use-id-pool yes_or_no; ] Obsolete+ - [ use-ixfr yes_or_no; ] Obsolete - [ treat-cr-as-space yes_or_no; ] Obsolete# - [ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes - [ forward ( only | first ); ] Yes - [ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ] Yes - [ check-names ... ] Obsolete - [ allow-notify { address_match_list }; ] Yes* - [ allow-query { address_match_list }; ] Yes@ - [ allow-transfer { address_match_list }; ] Yes@ - [ allow-recursion { address_match_list }; ] Yes@ - [ blackhole { address_match_list }; ] Yes - [ listen-on [ port ip_port ] { address_match_list }; ] Yes@ - [ listen-on-v6 [ port ip_port ] { address_match_list }; ] Yes* - [ query-source ... ] Yes - [ query-source-v6 ... ] Yes* - [ lame-ttl number; ] Yes - [ max-transfer-time-in number; ] Yes - [ max-transfer-idle-in number; ] Yes* - [ max-transfer-time-out number; ] Yes* - [ max-transfer-idle-out number; ] Yes* - [ max-cache-ttl number; ] Yes* - [ max-ncache-ttl number; ] Yes - [ max-cache-size size_spec; ] Yes* - [ min-roots number; ] Obsolete - [ serial-queries number; ] Obsolete - [ serial-query-rate number; ] Yes* - [ transfer-format ( one-answer | many-answers ); ] Yes% - [ transfers-in number; ] Yes - [ transfers-out number; ] Yes - [ transfers-per-ns number; ] Yes - [ transfer-source ...; ] Yes - [ transfer-source-v6 ...; ] Yes* - [ notify-source ...; ] Yes* - [ notify-source-v6 ...; ] Yes* - [ request-ixfr yes_or_no; ] Yes* - [ provide-ixfr yes_or_no; ] Yes* - [ maintain-ixfr-base yes_or_no; ] Obsolete - [ max-ixfr-log-size number; ] Obsolete - [ coresize size_spec ; ] Yes - [ datasize size_spec ; ] Yes - [ files size_spec ; ] Yes - [ stacksize size_spec ; ] Yes - [ cleaning-interval number; ] Yes - [ heartbeat-interval number; ] Yes - [ interface-interval number; ] Yes - [ statistics-interval number; ] No - [ topology { address_match_list }; ] No - [ sortlist { address_match_list }; ] Yes - [ rrset-order { order_spec ; [ order_spec ; ... ] }; ] No - [ recursive-clients number; ] Yes* - [ tcp-clients number; ] Yes* - [ tkey-domain ... ] Yes* - [ tkey-dhkey ... ] Yes* - [ min-refresh-time number ; ] Yes* - [ max-refresh-time number ; ] Yes* - [ min-retry-time number ; ] Yes* - [ max-retry-time number ; ] Yes* - [ port number; ] Yes* - [ sig-validity-interval number; ] Yes* - [ additional-from-auth yes_or_no; ] Yes* - [ additional-from-cache yes_or_no; ] Yes* - [ random-device path_name; ] Yes* - [ minimal-responses yes_or_no; ] Yes* - [ match-mapped-addresses yes_or_no; ] Yes* - [ allow-v6-synthesis { address_match_list }; ] Yes + blackhole { ; ... }; + coresize ; + datasize ; + deallocate-on-exit ; // obsolete + directory ; + dump-file ; + fake-iquery ; // obsolete + files ; + has-old-clients ; // obsolete + heartbeat-interval ; + host-statistics ; + interface-interval ; + listen-on [ port ] { ; ... }; + listen-on-v6 [ port ] { ; ... }; + match-mapped-addresses ; + memstatistics-file ; + multiple-cnames ; // obsolete + named-xfer ; // obsolete + pid-file ; + port ; + random-device ; + recursive-clients ; + rrset-order { [ class ] [ type ] [ name + ] ; ... }; + serial-queries ; // obsolete + serial-query-rate ; + stacksize ; + statistics-file ; + statistics-interval ; // not yet implemented + tcp-clients ; + tkey-dhkey ; + tkey-gssapi-credential ; + tkey-domain ; + transfers-per-ns ; + transfers-in ; + transfers-out ; + treat-cr-as-space ; // obsolete + use-id-pool ; // obsolete + use-ixfr ; + version ; + allow-notify { ; ... }; + allow-update-forwarding { ; ... }; + allow-recursion { ; ... }; + allow-v6-synthesis { ; ... }; + sortlist { ; ... }; + topology { ; ... }; // not implemented + auth-nxdomain ; // default changed + minimal-responses ; + recursion ; + provide-ixfr ; + request-ixfr ; + fetch-glue ; // obsolete + rfc2308-type1 ; // not yet implemented + additional-from-auth ; + additional-from-cache ; + query-source ; + query-source-v6 ; + notify-source ; + notify-source-v6 ; + cleaning-interval ; + min-roots ; // not implemented + lame-ttl ; + max-ncache-ttl ; + max-cache-ttl ; + transfer-format ; + max-cache-size ; + check-names ; // not implemented + cache-file ; + allow-query { ; ... }; + allow-transfer { ; ... }; + notify ; + also-notify [ port ] { ; ... }; + dialup ; + forward ( first | only ); + forwarders [ port ] { ; ... }; + maintain-ixfr-base ; + max-ixfr-log-size ; // obsolete + transfer-source ; + transfer-source-v6 ; + max-transfer-time-in ; + max-transfer-time-out ; + max-transfer-idle-in ; + max-transfer-idle-out ; + max-retry-time ; + min-retry-time ; + max-refresh-time ; + min-refresh-time ; + sig-validity-interval ; + zone-statistics ; }; -acl Yes@ - -include Yes - -key Yes - -logging Yes - controls { - [ inet ... ] Yes% - [ unix ... ] Obsolete + inet allow { ; ... } [ + keys { ; ... } ]; + unix ; // not implemented }; -server ip_addr { - [ bogus yes_or_no; ] Yes - [ request-ixfr yes_or_no; ] Yes* - [ provide-ixfr yes_or_no; ] Yes* - [ support-ixfr yes_or_no; ] Obsolete - [ edns yes_or_no; ] Yes* - [ transfers number; ] Yes - [ transfer-format ( one-answer | many-answers ); ] Yes% - [ keys { key_id [key_id ... ] }; ] Yes +acl { ; ... }; + +logging { + channel { + file ; + syslog ; + null; + stderr; + severity ; + print-time ; + print-severity ; + print-category ; + }; + category { ; ... }; }; -trusted-keys Yes - -zone "domain_name" [ ( in | hs | hesiod | chaos ) ] { - type master; Yes - file path_name; Yes - [ forward ( only | first ); ] Yes - [ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes - [ check-names ( warn | fail | ignore ); ] Obsolete - [ allow-update { address_match_list }; ] Yes@ - [ update-policy ... ] Yes* - [ allow-query { address_match_list }; ] Yes@ - [ allow-transfer { address_match_list }; ] Yes@ - [ notify-source ...; ] Yes* - [ notify-source-v6 ...; ] Yes* - [ dialup yes_or_no | notify; ] Yes& - [ max-transfer-time-out number; ] Yes* - [ max-transfer-idle-out number; ] Yes* - [ notify yes_or_no | explicit; ] Yes& - [ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes - [ ixfr-base path_name; ] Obsolete - [ pubkey number number number string; ] No - [ sig-validity-interval number; ] Yes* - [ database string ; [string; ... ] ] Yes* - [ min-refresh-time number ; ] Yes* - [ max-refresh-time number ; ] Yes* - [ min-retry-time number ; ] Yes* - [ max-retry-time number ; ] Yes* +view { + match-clients { ; ... }; + match-destinations { ; ... }; + match-recursive-only ; + key { + algorithm ; + secret ; + }; + zone { + type ( master | slave | stub | hint | forward ); + allow-update { ; ... }; + allow-update-forwarding { ; ... }; + file ; + ixfr-base ; // obsolete + ixfr-tmp-file ; // obsolete + masters [ port ] { [ key ]; + ... }; + pubkey ; // + obsolete + update-policy { ( grant | deny ) ( name | + subdomain | wildcard | self ) ; ... }; + database ; + check-names ; // not implemented + allow-query { ; ... }; + allow-transfer { ; ... }; + notify ; + also-notify [ port ] { ; ... }; + dialup ; + forward ( first | only ); + forwarders [ port ] { ; ... }; + maintain-ixfr-base ; + max-ixfr-log-size ; // obsolete + transfer-source ; + transfer-source-v6 ; + max-transfer-time-in ; + max-transfer-time-out ; + max-transfer-idle-in ; + max-transfer-idle-out ; + max-retry-time ; + min-retry-time ; + max-refresh-time ; + min-refresh-time ; + sig-validity-interval ; + zone-statistics ; + }; + server { + bogus ; + provide-ixfr ; + request-ixfr ; + support-ixfr ; // obsolete + transfers ; + transfer-format ( many-answers | one-answer ); + keys ; + edns ; + }; + trusted-keys { + ; ... }; + allow-notify { ; ... }; + allow-update-forwarding { ; ... }; + allow-recursion { ; ... }; + allow-v6-synthesis { ; ... }; + sortlist { ; ... }; + topology { ; ... }; // not implemented + auth-nxdomain ; // default changed + minimal-responses ; + recursion ; + provide-ixfr ; + request-ixfr ; + fetch-glue ; // obsolete + rfc2308-type1 ; // not yet implemented + additional-from-auth ; + additional-from-cache ; + query-source ; + query-source-v6 ; + notify-source ; + notify-source-v6 ; + cleaning-interval ; + min-roots ; // not implemented + lame-ttl ; + max-ncache-ttl ; + max-cache-ttl ; + transfer-format ; + max-cache-size ; + check-names ; // not implemented + cache-file ; + allow-query { ; ... }; + allow-transfer { ; ... }; + notify ; + also-notify [ port ] { ; ... }; + dialup ; + forward ( first | only ); + forwarders [ port ] { ; ... }; + maintain-ixfr-base ; + max-ixfr-log-size ; // obsolete + transfer-source ; + transfer-source-v6 ; + max-transfer-time-in ; + max-transfer-time-out ; + max-transfer-idle-in ; + max-transfer-idle-out ; + max-retry-time ; + min-retry-time ; + max-refresh-time ; + min-refresh-time ; + sig-validity-interval ; + zone-statistics ; }; -zone "domain_name" [ ( in | hs | hesiod | chaos ) ] { - type slave; Yes - [ file path_name; ] Yes - [ ixfr-base path_name; ] Obsolete - [ ixfr-tmp-file path_name; ] Obsolete - masters [ port ip_port ] { ip_addr; [ ip_addr; ... ] }; Yes - [ forward ( only | first ); ] Yes - [ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes - [ check-names ( warn | fail | ignore ); ] Obsolete - [ allow-notify { address_match_list };] Yes* - [ allow-update-forwarding { address_match_list }; ] Yes* - [ allow-query { address_match_list }; ] Yes@ - [ allow-transfer { address_match_list }; ] Yes@ - [ transfer-source ...; ] Yes - [ transfer-source-v6 ...; ] Yes* - [ notify-source ...; ] Yes* - [ notify-source-v6 ...; ] Yes* - [ dialup yes_or_no | notify | notify-passive | - refresh | passive; ] Yes& - [ max-transfer-time-in number; ] Yes - [ max-transfer-idle-in number; ] Yes* - [ max-transfer-time-out number; ] Yes* - [ max-transfer-idle-out number; ] Yes* - [ notify yes_or_no | explicit; ] Yes& - [ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes - [ pubkey number number number string; ] No - [ min-refresh-time number ; ] Yes* - [ max-refresh-time number ; ] Yes* - [ min-retry-time number ; ] Yes* - [ max-retry-time number ; ] Yes* +lwres { + listen-on [ port ] { ; ... }; + view ; + search { ; ... }; + ndots ; }; -zone "domain_name" [ ( in | hs | hesiod | chaos ) ] { - type stub; Yes$ - [ file path_name; ] Yes - masters [ port ip_port ] { ip_addr; [ ip_addr; ... ] }; Yes - [ forward ( only | first ); ] Yes - [ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes - [ check-names ( warn | fail | ignore ); ] Obsolete - [ allow-query { address_match_list }; ] Yes@ - [ allow-transfer { address_match_list }; ] Yes@ - [ transfer-source ...; ] Yes - [ transfer-source-v6 ...; ] Yes* - [ dialup yes_or_no | passive | refresh; ] Yes% - [ max-transfer-time-in number; ] Yes - [ max-transfer-idle-in number; ] Yes* - [ pubkey number number number string; ] No - [ min-refresh-time number ; ] Yes* - [ max-refresh-time number ; ] Yes* - [ min-retry-time number ; ] Yes* - [ max-retry-time number ; ] Yes* +key { + algorithm ; + secret ; }; -zone "domain_name" [ ( in | hs | hesiod | chaos ) ] { - type forward; Yes - [ forward ( only | first ); ] Yes - [ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes +zone { + type ( master | slave | stub | hint | forward ); + allow-update { ; ... }; + allow-update-forwarding { ; ... }; + file ; + ixfr-base ; // obsolete + ixfr-tmp-file ; // obsolete + masters [ port ] { [ key ]; ... }; + pubkey ; // obsolete + update-policy { ( grant | deny ) ( name | subdomain | + wildcard | self ) ; ... }; + database ; + check-names ; // not implemented + allow-query { ; ... }; + allow-transfer { ; ... }; + notify ; + also-notify [ port ] { ; ... }; + dialup ; + forward ( first | only ); + forwarders [ port ] { ; ... }; + maintain-ixfr-base ; + max-ixfr-log-size ; // obsolete + transfer-source ; + transfer-source-v6 ; + max-transfer-time-in ; + max-transfer-time-out ; + max-transfer-idle-in ; + max-transfer-idle-out ; + max-retry-time ; + min-retry-time ; + max-refresh-time ; + min-refresh-time ; + sig-validity-interval ; + zone-statistics ; }; -zone "." [ ( in | hs | hesiod | chaos ) ] { - type hint; Yes - file path_name; Yes - [ check-names ( warn | fail | ignore ); ] Obsolete +server { + bogus ; + provide-ixfr ; + request-ixfr ; + support-ixfr ; // obsolete + transfers ; + transfer-format ( many-answers | one-answer ); + keys ; + edns ; }; -view "view_name" [ ( in | hs | hesiod | chaos ) ] { Yes* - match-clients { address_match_list }; Yes* - [ zone ... ] Yes - [ auth-nxdomain yes_or_no; ] Yes - [ fetch-glue yes_or_no; ] Obsolete - [ notify yes_or_no | explicit; ] Yes& - [ recursion yes_or_no; ] Yes - [ rfc2308-type1 yes_or_no; ] No - [ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes - [ forward ( only | first ); ] Yes - [ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ] Yes - [ check-names ... ] Obsolete - [ allow-notify { address_match_list }; ] Yes - [ allow-query { address_match_list }; ] Yes - [ allow-transfer { address_match_list }; ] Yes - [ allow-recursion { address_match_list }; ] Yes - [ query-source ... ] Yes - [ query-source-v6 ... ] Yes - [ lame-ttl number; ] Yes - [ max-transfer-time-out number; ] Yes* - [ max-transfer-idle-out number; ] Yes* - [ max-cache-ttl number; ] Yes* - [ max-ncache-ttl number; ] Yes - [ max-cache-size size_spec; ] Yes* - [ min-roots number; ] Obsolete - [ transfer-format ( one-answer | many-answers ); ] Yes% - [ transfer-source ...; ] Yes - [ transfer-source-v6 ...; ] Yes* - [ notify-source ...; ] Yes* - [ notify-source-v6 ...; ] Yes* - [ request-ixfr yes_or_no; ] Yes* - [ provide-ixfr yes_or_no;] Yes* - [ cleaning-interval number; ] Yes - [ topology { address_match_list }; ] No - [ sortlist { address_match_list }; ] Yes - [ rrset-order { order_spec ; [ order_spec ; ... ] }; ] No - [ key ... ] Yes - [ server ... ] Yes - [ trusted-keys ... ] Yes - [ sig-validity-interval number; ] Yes* - [ min-refresh-time number ; ] Yes* - [ max-refresh-time number ; ] Yes* - [ min-retry-time number ; ] Yes* - [ max-retry-time number ; ] Yes* - [ minimal-responses yes_or_no; ] Yes* - [ allow-v6-synthesis { address_match_list }; ] Yes -}; +trusted-keys { ; ... }; +