acl "trusted" {
    localhost;
    localnets;
    10.128.0.0/9;
};
options {
    listen-on port 53 { 127.0.0.1; 10.128.0.0/9; };
    listen-on-v6 port 53 { ::1; };
    directory               "/var/named";
    dump-file               "/var/named/data/cache_dump.db";
    statistics-file         "/var/named/data/named_stats.txt";
    memstatistics-file      "/var/named/data/named_mem_stats.txt";
    bindkeys-file           "/etc/named.iscdlv.key";
    managed-keys-directory  "/var/named/dynamic";
    auth-nxdomain no;
    version "asdf";

    dnssec-enable       yes;
    dnssec-validation   yes;
    dnssec-lookaside    auto;

    recursion yes;
    forward only;
    forwarders { 169.254.169.254; };

    allow-query     { trusted; };
    allow-recursion { trusted; };
};

// Disable forwarding for DNSBL queries
zone "activationcode.r.mail-abuse.com" { type forward; forward first; forwarders {}; };
zone "b.barracudacentral.org" { type forward; forward first; forwarders {}; };
zone "bl.mailspike.net" { type forward; forward first; forwarders {}; };
zone "bl.score.senderscore.com" { type forward; forward first; forwarders {}; };
zone "bl.spamcop.net" { type forward; forward first; forwarders {}; };
zone "blackholes.mail-abuse.org" { type forward; forward first; forwarders {}; };
zone "combined.njabl.org" { type forward; forward first; forwarders {}; };
zone "dbl.spamhaus.org" { type forward; forward first; forwarders {}; };
zone "dnsbl-1.uceprotect.net" { type forward; forward first; forwarders {}; };
zone "dnsbl.sorbs.net" { type forward; forward first; forwarders {}; };
zone "dob.sibl.support-intelligence.ne" { type forward; forward first; forwarders {}; };
zone "dob.sibl.support-intelligence.net" { type forward; forward first; forwarders {}; };
zone "fulldom.rfc-ignorant.org" { type forward; forward first; forwarders {}; };
zone "iadb.isipp.com" { type forward; forward first; forwarders {}; };
zone "list.dnswl.org" { type forward; forward first; forwarders {}; };
zone "multi.surbl.org" { type forward; forward first; forwarders {}; };
zone "multi.uribl.com" { type forward; forward first; forwarders {}; };
zone "nonconfirm.mail-abuse.com" { type forward; forward first; forwarders {}; };
zone "sa-accredit.habeas.com." { type forward; forward first; forwarders {}; };
zone "sa-trusted.bondedsender.org" { type forward; forward first; forwarders {}; };
zone "sbl.spamhaus.org" { type forward; forward first; forwarders {}; };
zone "truncate.gbudb.net" { type forward; forward first; forwarders {}; };
zone "zen.spamhaus.org" { type forward; forward first; forwarders {}; };

logging {
    channel default_debug {
    file "data/named.run";
    severity dynamic;
    };
    channel default_file {
    file "/var/named/chroot/var/log/default.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel general_file {
    file "/var/named/chroot/var/log/general.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel database_file {
    file "/var/named/chroot/var/log/database.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel security_file {
    file "/var/named/chroot/var/log/security.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel config_file {
    file "/var/named/chroot/var/log/config.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel resolver_file {
    file "/var/named/chroot/var/log/resolver.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel xfer-in_file {
    file "/var/named/chroot/var/log/xfer-in.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel xfer-out_file {
    file "/var/named/chroot/var/log/xfer-out.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel notify_file {
    file "/var/named/chroot/var/log/notify.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel client_file {
    file "/var/named/chroot/var/log/client.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel unmatched_file {
    file "/var/named/chroot/var/log/unmatched.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel queries_file {
    file "/var/named/chroot/var/log/queries.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel network_file {
    file "/var/named/chroot/var/log/network.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel update_file {
    file "/var/named/chroot/var/log/update.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel dispatch_file {
    file "/var/named/chroot/var/log/dispatch.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel dnssec_file {
    file "/var/named/chroot/var/log/dnssec.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };
    channel lame-servers_file {
    file "/var/named/chroot/var/log/lame-servers.log" versions 3 size 5m;
    severity dynamic;
    print-time yes;
    };

    category default { default_file; };
    category general { general_file; };
    category database { database_file; };
    category security { security_file; };
    category config { config_file; };
    category resolver { resolver_file; };
    category xfer-in { xfer-in_file; };
    category xfer-out { xfer-out_file; };
    category notify { notify_file; };
    category client { client_file; };
    category unmatched { unmatched_file; };
    category queries { queries_file; };
    category network { network_file; };
    category update { update_file; };
    category dispatch { dispatch_file; };
    category dnssec { dnssec_file; };
    category lame-servers { lame-servers_file; };
};

zone "." IN {
    type hint;
    file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";