acl “xfer” {

      none;                                                                                                                                                                                 

};

acl “trusted” {

      127.0.0.0/8;                                                                                                                                                                          
      ::1/128;                                                                                                                                                                              
      172.16.0.0/16;                                                                                                                                                                        
      fe80::/10;                                                                                                                                                                            
      2803:1920::/32;                                                                                                                                                                  

};

options {

      directory "/var/cache/bind";

      listen-on-v6 { 2803:1920::4:3; };
      listen-on { 172.16.0.3; };

      allow-query {
              trusted;
      };
      allow-query-cache {
              trusted;
      };
      allow-recursion {
              trusted;
      };
      allow-transfer {
              none;
      };
      allow-update {
              none;
      };

      dnssec-enable no;
      dnssec-validation no;

      auth-nxdomain no;

};

include “/etc/bind/rndc.key”; controls {

      inet 127.0.0.1 port 953 allow { 127.0.0.1/32; ::1/128; } keys { "rndc-key"; };

};

zone “.” in {

      type hint;
      file "/var/bind/named.cache";

};

zone “localhost” IN {

      type master;
      file "/var/bind/pri/localhost.zone";
      notify no;

};