//
// Sample named.conf BIND DNS server 'named' configuration file
// for the Red Hat BIND distribution.
//
// See the BIND Administrator's Reference Manual (ARM) for details, in:
//   file:///usr/share/doc/bind-*/arm/Bv9ARM.html
// Also see the BIND Configuration GUI : /usr/bin/system-config-bind and 
// its manual.
//

acl "xfer" {
	67.219.101.146;
	208.83.234.75;
};

acl "trusted" {
	127.0.0.1;
	localhost;
};

options {
        // Those options should be used carefully because they disable port
        // randomization
	// query-source    port 53;	
	// query-source-v6 port 53;
	// Put files that named is allowed to write in the data/ directory:
	directory "/var/named"; // the default
//	recursion yes;
	allow-transfer { xfer; };
	allow-query { trusted; };
	allow-recursion { trusted; };
//	allow-recursion { 127.0.0.0; };
//	additional-from-auth no;
//	additional-from-cache no;
	dump-file 		"data/cache_dump.db";
        statistics-file 	"data/named_stats.txt";
        memstatistics-file 	"data/named_mem_stats.txt";
	version "[GSI]";
	notify yes;
	listen-on {
		127.0.0.1;
		67.219.101.146;
	};
	dnssec-enable yes;
	rrset-order { order cyclic; };
	zone-statistics yes;
};

// dns.gerdesas.com | radagast.gerdesas.com
server 208.83.234.75 {
	keys {
		TRANSFER;
	};
};

logging {

/*      If you want to enable debugging, eg. using the 'rndc trace' command,
 *      named will try to write the 'named.run' file in the $directory (/var/named).
 *      By default, SELinux policy does not allow named to modify the /var/named directory,
 *      so put the default debug log file in data/ :
 */
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
        channel named_default {
                file "/var/log/named/named";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_config {
                file "/var/log/named/named.config";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_queries {
                file "/var/log/named/named.queries";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_lameservers {
                file "/var/log/named/named.lameservers";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_notify {
                file "/var/log/named/named.notify";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_update {
                file "/var/log/named/named.updates";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_xferin {
                file "/var/log/named/named.xfer-in";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_xferout {
                file "/var/log/named/named.xfer-out";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };
        channel named_security {
                file "/var/log/named/named.security";
                severity info;
		print-category yes;
		print-severity yes;
		print-time yes;
        };

        category default { named_default; };
        category lame-servers { named_lameservers; };
        category notify { named_notify; };
        category queries { named_queries; };
        category config { named_config; };
        category update { named_update; };
        category xfer-in { named_xferin; };
        category xfer-out { named_xferout; };
        category security { named_security; };
};

controls {
	inet 127.0.0.1 port 953 allow { localhost; } keys { "rndckey"; };
};

zone "." {
        type hint;
        file "named.ca";
};

zone "bitzandbytez.net" { 
	type slave;
	file "slaves/bitzandbytez.net.zone";
	masters { 208.83.234.75; };
	allow-query { any; };
#	allow-notify { 208.83.234.75; };
};

zone "pctechathome.com" { 
	type slave;
	file "slaves/pctechathome.com.zone";
	masters { 208.83.234.75; };
	allow-query { any; };
#	allow-notify { 208.83.234.75; };
};

zone "pogsfanclub.org" { 
	type slave;
	file "slaves/pogsfanclub.org.zone";
	masters { 208.83.234.75; };
	allow-query { any; };
#	allow-notify { 208.83.234.75; };
};

zone "uucico.net" { 
	type slave;
	file "slaves/uucico.net.zone";
	masters { 208.83.234.75; };
	allow-query { any; };
#	allow-notify { 208.83.234.75; };
};

zone "netrek-classic.org" { 
	type slave;
	file "slaves/netrek-classic.org.zone";
	masters { 208.83.234.75; };
	allow-query { any; };
#	allow-notify { 208.83.234.75; };
};

zone "us.netrek.org" { 
	type slave;
	file "slaves/us.netrek.org.zone";
	masters { 63.170.91.1; 63.170.91.2; };
	allow-query { any; };
	allow-notify { 208.83.234.75; 67.219.101.146; };
};

key "rndckey" {
	algorithm	hmac-md5;
	secret		"NOTACHANCE";
};

key "TRANSFER" {
	algorithm hmac-md5;
	secret "NOTACHANCE";
};