acl goodclients { 10.0.1.0/24; 10.0.3.0/24; localhost; localnets; }; options { directory "/var/cache/bind"; recursion yes; allow-query { goodclients; }; dnssec-enable no; dnssec-validation no; dnssec-lookaside auto; #dnssec-validation auto; auth-nxdomain no; # conform to RFC1035 listen-on-v6 port 53 { noneo; }; forwarders { 8.8.8.8; 8.8.4.4; }; forward first; };