include "/etc/bind/named.conf.tsigkeys";

acl internals {
    192.168.0.0/16;
    127.0.0.0/8;
    10.0.0.0/24;
};

acl servers {
    82.40.81.96;
};

options {
    masterfile-format text;
	listen-on port 53 { any; };
    directory "/var/cache/bind";
    auth-nxdomain no;    # conform to RFC1035
    dnssec-validation yes;
    querylog yes;
    allow-recursion { internals; servers; };
    allow-query-cache { internals; servers; };
    notify no;
    transfer-source 172.104.150.205 port 53;
	allow-query     { any; };
	rate-limit {
      responses-per-second 500; // covers non-empty identical queries
      referrals-per-second 200;
      nxdomains-per-second 300;
      nodata-per-second 500;
      errors-per-second 200;
      all-per-second 2000;  // covers all queries from client
    }
};