primary named.conf
acl "trusted" {
  ss.ss.ss.ss;
  tt.tt.tt.tt;
  localhost;
};