tpl-bind9/named.conf.options

options {

	// Working directory of bind
	directory "/var/cache/bind";
	key-directory /etc/bind/keys ;

	// Some DNSSEC options
	dnssec-enable yes;
	dnssec-validation auto;
	auth-nxdomain no;

	// Some security options
	listen-on-v6 { any; };
	version none;
	hostname none;
	server-id none;

	// Disable recursion by default
	recursion no;

	// define queries options by default
	allow-query { any; };
	allow-query-cache { none; };

	// Disable notify by default
	notify no;

	// Disable transfer by default
	allow-transfer { none; };

};