tpl-bind9/named.conf.options

options {
	// Working directory of bind
	directory "/var/cache/bind";
	key-directory "/etc/bind/keys" ;

	// Some DNSSEC options
	dnssec-validation auto;
	auth-nxdomain no;

	// Some security options
	listen-on-v6 { any; };
	version none;
	hostname none;
	server-id none;

	// Disable recursion by default
	recursion no;

	// define queries options by default
	allow-query { any; };
	allow-query-cache { none; };

	// Disable notify by default
	notify no;

	// Disable transfer by default
	allow-transfer { none; };

	// Set SOA serial to date format (YYYYMMDDNN) for dynamic zones
	serial-update-method date;

};
logging {
	channel "queries" {
		file "/var/log/named/queries.log";
		print-time yes;
		print-category yes;
	};
	category queries { "queries"; };
};