10:50:52 root@firewall /var/named# cat /etc/named.conf
options {
        directory "/var/named";
        /*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
        // query-source address * port 53;
};

//
// a caching only nameserver config
//
zone "." IN {
        type hint;
        file "caching-example/named.ca";
};

zone "firewall.com.br" IN {

type master;
file "firewall.com.br.revzone";
allow-update { none; };
};


zone "localhost" IN {
        type master;
        file "caching-example/localhost.zone";
        allow-update { none; };
};

zone "23.1.1.10.in-addr.arpa" IN {
type master;
file "firewall.com.br.revzone";
allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "caching-example/named.local";
        allow-update { none; };
};
10:54:35 root@firewall /var/named#


10:54:35 root@firewall /var/named# cat firewall.com.br.revzone
@ IN SOA 23.1.1.10.in-addr.arpa.root.firewall.com.br. (
                       2000120301      ; Serial
                                3600            ; Refresh
                                300             ; Retry
                                3600000         ; Expire
                                3600 )          ; Minimum
         IN      NS      www.firewall.com.br.
 23      IN      PTR     www.firewall.com.br.

10:54:54 root@firewall /var/named#