<blockquote>acl "xfer" {
        none;                                                                                                                                                                                 
};                                                                                                                                                                                            
                                                                                                                                                                                              
acl "trusted" {                                                                                                                                                                               
        127.0.0.0/8;                                                                                                                                                                          
        ::1/128;                                                                                                                                                                              
        172.16.0.0/16;                                                                                                                                                                        
        fe80::/10;                                                                                                                                                                            
        2803:1920::/32;                                                                                                                                                                  
};

options {
        directory "/var/cache/bind";

        listen-on-v6 { 2803:1920::4:3; };
        listen-on { 172.16.0.3; };

        allow-query {
                trusted;
        };
        allow-query-cache {
                trusted;
        };
        allow-recursion {
                trusted;
        };
        allow-transfer {
                none;
        };
        allow-update {
                none;
        };

        dnssec-enable no;
        dnssec-validation no;

        auth-nxdomain no;
};

include "/etc/bind/rndc.key";
controls {
        inet 127.0.0.1 port 953 allow { 127.0.0.1/32; ::1/128; } keys { "rndc-key"; };
};

zone "." in {
        type hint;
        file "/var/bind/named.cache";
};

zone "localhost" IN {
        type master;
        file "/var/bind/pri/localhost.zone";
        notify no;
};</blockquote>