acl internals { // lo adapter 127.0.0.1; // CIDR for your local networks 192.168.16.0/24; }; options { directory "/var/cache/bind"; forwarders { 9.9.9.9; 8.8.8.8; }; allow-query { internals; }; allow-query-cache { internals; }; // enables recursive queries but on from our local nets and local hosts // Do not allow externals to do recursive queries. recursion yes; allow-recursion { internals; }; allow-transfer { internals; }; dnssec-enable no; dnssec-validation auto; listen-on-v6 { any; }; };