// ALLOW QUERIES FROM THESE SUBNETS: -----------------------------------------
acl "cary_nets" { 10.0.0.0/8; 172.16.0.0/12; 127.0.0.1; };
options {
	directory	"/";
	version		"Beta V";
	listen-on	{ 10.10.10.1; 172.16.0.1; 127.0.0.1; };
	allow-query	{ cary_nets; };
	allow-recursion { cary_nets; };
};

// RNDC KEY 1 ----------------------------------------------------------------
key rndc-key {
       algorithm hmac-md5;
       secret "<key>";
};

// LOGGING OPTIONS -----------------------------------------------------------
logging {
    channel security_channel {
        # Send log messages to the specified file
        file            "log/security.log";
        # Log all messages
        severity        debug;
        # Log the date and time of the message
        print-time      yes;
        # Log the category of the message
        print-category yes;
        # Log the severity level of the message
        print-severity yes;
    };
    channel default {
        # Send logs to the syslog 'local0' facility
        syslog          local0;
        # Log messages of severity 'info' or higher
        severity        info;
        print-category yes;
        print-severity yes;
    };
    # Logs about approval and denial of requests
    category security {
        security_channel;
        default;
    };
    # Ignore logs about misconfigured remote servers
    category lame-servers { null; };
    # Default logging options
    category default { default; };
};

controls {
       inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "rndc-key"; };
};

// LOCALHOST -----------------------------------------------------------------
zone "localhost.zone" {
	type	master;
	file	"master/localhost.zone";
	notify	no;
};

zone "0.0.127.in-addr.arpa" {
	type	master;
	file	"master/0.0.127.in-addr.arpa.zone";
	notify	no;
};

// RFC 1912 - SPECIAL --------------------------------------------------------
zone "255.in-addr.arpa" {
	type	master;
	file	"master/255.in-addr.arpa.zone";
};

zone "0.in-addr.arpa" {
	type	master;
	file	"master/0.in-addr.arpa.zone";
};

// ROOT HINT -----------------------------------------------------------------
zone "." {
	type	hint;
	file	"master/root.hint";
};

// LAN ZONES -----------------------------------------------------------------
zone "lan.<me>.org" {
	type		master;
	file		"master/lan.<me>.org.zone";
	allow-update	{ key rndc-key; };
	allow-transfer	{ none; };
	notify 	yes;
};

zone "0.0.10.in-addr.arpa" {
	type 		master;
	file		"master/0.0.10.in-addr.arpa.zone";
	allow-update	{ key rndc-key; };
	allow-transfer	{ none; };
	notify	yes;
};

zone "1.0.10.in-addr.arpa" {
	type		master;
	file		"master/1.0.10.in-addr.arpa.zone";
	allow-update	{ key rndc-key; };
	allow-transfer	{ none; };
	notify	yes;
};

zone "2.0.10.in-addr.arpa" {
        type            master;
        file            "master/2.0.10.in-addr.arpa.zone";
        allow-update    { key rndc-key; };
        allow-transfer  { none; };
        notify  yes;
};

zone "10.10.10.in-addr.arpa" {
	type		master;
	file		"master/10.10.10.in-addr.arpa.zone";
	allow-update	{ key rndc-key; };
	allow-transfer	{ none; };
	notify	yes;
};

zone "11.10.10.in-addr.arpa" {
	type		master;
	file		"master/11.10.10.in-addr.arpa.zone";
	allow-update	{ key rndc-key; };
	allow-transfer	{ none; };
	notify yes;
};