acl "main_xfer" {    
        $SECONDARY_NAMESERVER_IP;
        $TERTIARY_NAMESERVER_IP;
};      
        
acl "vhost_xfer" {  
        $SECONDARY_NAMESERVER_IP;
};      
        
acl "our_hosts" {  
        $PRIMARY_NAMESERVER_IP;
        $SECONDARY_NAMESERVER_IP;
        $ANOTHER_HOST;
        $ANOTHER_HOST_2;
};

acl "bogons" {
        $OUR_FIRST_THREE.0/32;
        $OUR_FIRST_THREE.255/32;
        0.0.0.0/8;
        1.0.0.0/8;
        2.0.0.0/8;
        5.0.0.0/8;
        10.0.0.0/8;
        14.0.0.0/8;
        23.0.0.0/8;
        27.0.0.0/8;
        31.0.0.0/8;
        36.0.0.0/8;
        37.0.0.0/8;
        39.0.0.0/8;
        42.0.0.0/8;
        46.0.0.0/8;
        100.0.0.0/8;
        101.0.0.0/8;
        102.0.0.0/8;
        103.0.0.0/8;
        104.0.0.0/8;
        105.0.0.0/8;
        106.0.0.0/8;
        107.0.0.0/8;
        108.0.0.0/8;
        109.0.0.0/8;
        110.0.0.0/8;
        111.0.0.0/8;
        112.0.0.0/8;
        113.0.0.0/8;
        114.0.0.0/8;
        115.0.0.0/8;
        127.0.0.0/8;
        169.254.0.0/16;
        172.16.0.0/12;
        175.0.0.0/8;
        176.0.0.0/8;
        177.0.0.0/8;
        178.0.0.0/8;
        179.0.0.0/8;
        180.0.0.0/8;
        181.0.0.0/8;
        182.0.0.0/8;
        183.0.0.0/8;
        184.0.0.0/8;
        185.0.0.0/8;
        192.0.2.0/24;
        192.168.0.0/16;
        197.0.0.0/8;
        204.152.64.0/23;
        223.0.0.0/8;
        224.0.0.0/3;
};      
        
logging {
        channel main_syslog {
                syslog local2;
                severity debug;
        };
        
        channel audit_log {
                file "/var/log/named.log";
                severity debug;
                print-time yes;
        };
        
        category default { main_syslog; };
        category general { main_syslog; };
        category security { audit_log; main_syslog; };
        category config { main_syslog; };
        category resolver { audit_log; };
        category xfer-in { audit_log; };
        category xfer-out { audit_log; };
        category notify { audit_log; };
        category client { audit_log; };
        category network { audit_log; };
        category update { audit_log; };
        category queries { audit_log; };
        category lame-servers { audit_log; };
};      
        
options {
        directory "/etc/namedb";
        dnssec-enable no;
        listen-on { $PRIMARY_NAMESERVER; };
        pid-file "/var/run/named.pid";
        version "OUR DNS";
        statistics-file "/var/log/named.stats";
        memstatistics-file "/var/log/named.memstats";
        dump-file "/var/adm/named.dump";
        zone-statistics yes;
        notify no;
        transfer-format many-answers; 
        max-transfer-time-in 60;
        interface-interval 0;
        allow-transfer {
                main_xfer; 
        };
        allow-query {
                our_hosts;
        };
        blackhole {
                bogons;
        };
};      

controls {
        inet $PRIMARY_NAMESERVER
                allow { $PRIMARY_NAMESERVER; };
};      
        
view "internal-in" in { 
        match-clients { our_hosts; };
        recursion yes;
        additional-from-auth yes;
        additional-from-cache yes;
        
        zone "." {
                type hint;
                file "root.cache";
        };      
        
        zone "localhost" {
                type master;
                file "localhost";
                allow-query {
                        any;
                };
                allow-transfer {
                        none;
                };
        };

        zone "127.IN-ADDR.ARPA" {
                type master;
                file "127";
                allow-query { 
                        any;
                };
                allow-transfer {
                        none;
                };
        };
        zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip
6.int" {
                type master;
                file "loopback.v6";
                allow-query {
                        any;
                };
                allow-transfer {
                        none;
                };
        };

        zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip
6.arpa" {       
                type master;
                file "loopback.v6";
                allow-query {
                        any;
                };
                allow-transfer {
                        none;
                };
        };
                
        zone "$OUR_MAIN_DOMAIN" {
                type master; 
                file "$OUR_MAIN_DOMAIN";
                allow-transfer {
                        main_xfer;
                };      
        };      
        
        zone "$A_HOSTED_DOMAIN" {
                type master;
                file "$A_HOSTED_DOMAIN";
                allow-transfer {
                        vhost_xfer;
                };
        };              
                
        zone "$A_HOSTED_DOMAIN" {
                type master; 
                file "$A_HOSTED_DOMAIN";
                allow-transfer {
                        vhost_xfer;
                };
        };      
                
        zone "$A_HOSTED_DOMAIN" {
                type master;
                file "$A_HOSTED_DOMAIN";
                allow-transfer {
                        vhost_xfer;
                };
        };      
                
};              

#view "external-chaos" chaos {
#       match-clients { any; };
#       recursion no;
#       zone "." {
#               type hint;   
#               file "/dev/null";
#       };
#};




% sudo named-checkconf -z ~named/etc/named.conf
zone localhost/IN: loaded serial 1999012100
zone 127.IN-ADDR.ARPA/IN: loaded serial 1999012100
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.int/IN: loaded serial 1999012100
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1999012100
zone $OUR_MAIN_DOMAIN/IN: loading from master file $OUR_MAIN_DOMAIN failed: file not found
internal-in/$OUR_MAIN_DOMAIN/in: file not found
zone jesuswasanisraelite.com/IN: loaded serial 2006111501
zone kurtisbliss.com/IN: loaded serial 2006111501
zone nosida.com/IN: loaded serial 2006111501