/etc/bind/named.conf.options

options {
        directory "/var/cache/bind";

        listen-on { 127.0.0.1; 192.168.1.100; };
        listen-on-v6 { ::1; };
        allow-query { internals; };
        allow-recursion { internals; };
        allow-transfer { none; };
        version none;
        forwarders {
                // Cloudflare Public DNS (IPv4)
                1.1.1.1;
                1.0.0.1;
                // Cloudflare Public DNS (IPv6)
                2606:4700:4700::1111;
                2606:4700:4700::1001;

                // Google Public DNS (IPv4)
                8.8.8.8;
                8.8.4.4;
                // Google Public DNS (IPv6)
                2001:4860:4860::8888;
                2001:4860:4860::8844;
        };

        //========================================================================
        // If BIND logs error messages about the root key being expired,
        // you will need to update your keys.  See https://www.isc.org/bind-keys
        //========================================================================
        dnssec-validation auto;

        auth-nxdomain no;    # conform to RFC1035
        // listen-on-v6 { any; };
};
acl internals {
        127.0.0.0/8;
        ::1/128;
        192.168.5.0/24;
};