acl "xfer" {
        //127.0.0.1/32;
        //::1/128;
        "none";
};

acl "trusted" {
        127.0.0.0/8;
        192.168.1.0/24;
        ::1/128;
};

options {
        directory "/var/bind";
        pid-file "/var/run/named/named.pid";


        listen-on-v6 { ::1; };
        listen-on { 127.0.0.1; 192.168.1.33; };

        recursion yes;

        allow-query {
                any;
        };

        allow-query-cache {
                any;
        };

        allow-transfer {
                xfer;
        };

        forward first;
        forwarders {
                82.209.240.241;         // Your ISP NS
                82.209.243.241;         // Your ISP NS
                4.2.2.1;                // Level3 Public DNS
                4.2.2.2;                // Level3 Public DNS
                8.8.8.8;                // Google Open DNS
                8.8.4.4;                // Google Open DNS
        };


        dnssec-enable yes;
        dnssec-validation yes;

        /* if you have problems and are behind a firewall: */
        query-source address * port 53;
};

logging {
        channel default_log {
                file "/var/log/named/named.log" versions 5 size 50M;
                print-time yes;
                print-severity yes;
                print-category yes;
        };

        category default { default_log; };
        category general { default_log; };
};

include "/etc/bind/rndc.key";
controls {
        inet 127.0.0.1 port 953 allow { 127.0.0.1/32; ::1/128; } keys { "rndc-key"; };
};


view "internal" in {

        match-clients { 127.0.0.1; 192.168.1.0/24; };
        recursion yes;
        additional-from-auth yes;
        additional-from-cache yes;

        zone "." in {
                type hint;
                file "/var/bind/root.cache";
        };

        zone "localhost" IN {
                type master;
                file "pri/localhost.zone";
                allow-update { none; };
                notify no;
                allow-query { any; };
                allow-transfer { none; };
        };

        zone "127.in-addr.arpa" IN {
                type master;
                file "pri/127.zone";
                allow-update { none; };
                notify no;
                allow-query { any; };
                allow-transfer { none; };
        };

};

view "public" in {
        match-clients { any; };
        recursion no;
        additional-from-auth no;
        additional-from-cache no;

        zone "." in {
                type hint;
                file "/var/bind/root.cache";
        };

};

view "chaos" chaos {
        match-clients { any; };
        allow-query { none; };
        zone "." {
                type hint;
                file "/dev/null";  // or any empty file
        };
};