// KVM /etc/bind/named.conf.options

acl "trusted" {
        172.16.1.0/24;
        localhost;
        localnets;
};

acl "ad" {
	172.16.1.20/32;
	172.16.1.150/32;
};

options {
	directory "/var/cache/bind";
	
	// transfery zóny
	allow-query { trusted; };
        allow-recursion { trusted; };
        allow-query-cache { trusted; };
	allow-transfer { ad; };

	// IP Googlu, ale měly by tu být DNS IP od ISP
	forwarders {
		8.8.8.8;
		8.8.4.4;
	};

	dnssec-validation auto;

	auth-nxdomain no;
	listen-on { 172.16.1.150; };
};