options { directory "/var/cache/bind"; //Allow localhost and a client IP of 1.2.3.4 allow-query { localhost; 1.2.3.4; }; recursion yes; dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; //Only use if your server has an ipv6 iface! };