trusted-keys {
"netsec.tislabs.com." 257 3 5 "AQOoEFn3VnV1qDwnNX9GlukAsbL7buCk6Wmt3VG9BOVae84VV
        c/yWghg tFM/WKw/5243XoBEeNyaahRIrlAJEnErLUWlKO/YuWkasRN4jkS2dDjS MWgjdGx
        zux+e0UV2UZfpjyygYvaD9U8xTwwzLYLDkamr1SCaHWCWUOO+ QMa/WY//r3ObbOFOYCvyqv
        sLRwofSFnQnsbihKbcP9HQSDQ4iRqbCTMV B+yq5NXiFoZT05Sqm/ijOrjLznZkUqIal9EXq
        yhNT0dTa9Gdn8+tfn+l YApwK91NA2YG/3t8ZKTYjDLe1YlwKg8OBTTN4ARap+265EtE87Bh
        E6ZK fp+DUx4N";
// trust dnssec-tools.org
"dnssec-tools.org." 257 3 5 "AQOuaT/8Flh/XrnzX5wjy1rzz6WCv54W1W+cl47p7vlRr+eoRBH
        vQrbm ZRZx21BlxlHpGT6rKk+A/uCEl8OuTS4Q3JYvKUBsi6ICf7l1x/snemve geWqFTLzK
        KHqQ0S6Z/kWavej2IjmBzykbvMlPGTbCbUXq/lfEF/3I2nE ByB08pp0nf7UU7ZswYJYgjtZ
        jZUt25dRW5A+ViPonCNM/dZ8CX/RfBaJ tJxSkoLLdu2VyTHZ8f+h92yQXXl26QpH6YBot41
        P2F05hOmDXeAkQo3V krSKiT6mfdMBhKVOEOowGHkm2CHzwE9DOVvzNgcxlbC17XW4bFT55J
        t7 tEhqWqMQXgkSsZ5vXFG8oR7t1/nQYalbMTAe7dAVkeOxFOWS2RpCNPz/ beSIJdPbAL7r
        buK8gM2Xu2BRq4sewHInu3/ap8z8WNpUxK3WsHXymeVR 0Uttb2w6HlcsmRVAygUgKZpkDf5
        NbRkTC6uAOwiD2EVz7WZREcCvIJXi 09Go0THDMD3TpXVAQsaeX4oM4aMzXFibQkCDKMEnkh
        Adf21jaiTfHCxn aEheuiuQjJuGQE2my2rdwPIfJkQ5sgirFM3LuRdAiRtxxd1bDLP9v5kR
        5PpDEKs48SKlkLfp7efWCpG9u3lWyz4pbV631PPcK419kHivFKPRwllF 19LxWseYsXE9yw=
        =";
};

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";

        listen-on       { any; };

        listen-on-v6    { none; };

        recursion no;

        dnssec-enable yes; // turn on dnssec awareness

};

view "internal-in" {
        match-clients { 192.168.1.0/24; 127.0.0.1/32; };
        recursion yes; // no recursive lookups for external clients
};