# $Id: $

acl "lo"     { 127.0.0.1; };
acl "trusted" { 127.0.0.1/8; };

logging {
    channel "default_log" {
        file "/var/named/logs/named.log" versions 10 size 100k;
        severity debug;
        print-category yes;
        print-severity yes;
        print-time yes;
    };

    channel "query_log" {
        file "/var/named/logs/query.log" versions 10 size 100k;
        severity debug;
        print-category yes;
        print-severity yes;
        print-time yes;
    };

    category default { default_log; };
    category general { default_log; };
    category database { default_log; };
    category security { default_log; };
    category config { default_log; };
    category resolver { default_log; };
    category xfer-in { default_log; };
    category xfer-out { default_log; };
    category notify { default_log; };
    category client { default_log; };
    category unmatched { default_log; };
    category network { default_log; };
    category update { default_log; };
    category update-security { default_log; };
    category queries { query_log; };
    category dispatch { default_log; };
    category dnssec { default_log; };
    category lame-servers { default_log; };
    category delegation-only { default_log; };
    category edns-disabled { default_log; };
};

options {
    directory "/var/named";
    pid-file "/var/named/run/named.pid";
    statistics-file "/var/named/run/named.stats";
    dump-file "/var/named/run/named.dump";
    zone-statistics yes;
    notify no;
    transfer-format many-answers;
    interface-interval 0;
    version "";
    listen-on { lo; };
    allow-transfer { none; };
    allow-query { none; };
    recursion no;
    additional-from-auth no;
    additional-from-cache no;
};

key "rndc-key" { algorithm hmac-md5; secret "TODO"; };

controls {
    inet 127.0.0.1 port 953 allow { trusted; } keys { "rndc-key"; };
};

view "lo" in {
    match-clients { lo; };
    allow-query { lo; };
    allow-transfer { none; };
    recursion yes;
    additional-from-auth yes;
    additional-from-cache yes;
};