rendered paste body// ALLOW QUERIES FROM THESE SUBNETS: -----------------------------------------
acl "cary_nets" { 10.0.0.0/8; 172.16.0.0/12; 127.0.0.1; };
options {
directory "/";
version "Beta V";
listen-on { 10.10.10.1; 172.16.0.1; 127.0.0.1; };
allow-query { cary_nets; };
allow-recursion { cary_nets; };
};
// RNDC KEY 1 ----------------------------------------------------------------
key rndc-key {
algorithm hmac-md5;
secret "<key>";
};
// LOGGING OPTIONS -----------------------------------------------------------
logging {
channel security_channel {
# Send log messages to the specified file
file "log/security.log";
# Log all messages
severity debug;
# Log the date and time of the message
print-time yes;
# Log the category of the message
print-category yes;
# Log the severity level of the message
print-severity yes;
};
channel default {
# Send logs to the syslog 'local0' facility
syslog local0;
# Log messages of severity 'info' or higher
severity info;
print-category yes;
print-severity yes;
};
# Logs about approval and denial of requests
category security {
security_channel;
default;
};
# Ignore logs about misconfigured remote servers
category lame-servers { null; };
# Default logging options
category default { default; };
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
// LOCALHOST -----------------------------------------------------------------
zone "localhost.zone" {
type master;
file "master/localhost.zone";
notify no;
};
zone "0.0.127.in-addr.arpa" {
type master;
file "master/0.0.127.in-addr.arpa.zone";
notify no;
};
// RFC 1912 - SPECIAL --------------------------------------------------------
zone "255.in-addr.arpa" {
type master;
file "master/255.in-addr.arpa.zone";
};
zone "0.in-addr.arpa" {
type master;
file "master/0.in-addr.arpa.zone";
};
// ROOT HINT -----------------------------------------------------------------
zone "." {
type hint;
file "master/root.hint";
};
// LAN ZONES -----------------------------------------------------------------
zone "lan.<me>.org" {
type master;
file "master/lan.<me>.org.zone";
allow-update { key rndc-key; };
allow-transfer { none; };
notify yes;
};
zone "0.0.10.in-addr.arpa" {
type master;
file "master/0.0.10.in-addr.arpa.zone";
allow-update { key rndc-key; };
allow-transfer { none; };
notify yes;
};
zone "1.0.10.in-addr.arpa" {
type master;
file "master/1.0.10.in-addr.arpa.zone";
allow-update { key rndc-key; };
allow-transfer { none; };
notify yes;
};
zone "2.0.10.in-addr.arpa" {
type master;
file "master/2.0.10.in-addr.arpa.zone";
allow-update { key rndc-key; };
allow-transfer { none; };
notify yes;
};
zone "10.10.10.in-addr.arpa" {
type master;
file "master/10.10.10.in-addr.arpa.zone";
allow-update { key rndc-key; };
allow-transfer { none; };
notify yes;
};
zone "11.10.10.in-addr.arpa" {
type master;
file "master/11.10.10.in-addr.arpa.zone";
allow-update { key rndc-key; };
allow-transfer { none; };
notify yes;
};