options {
listen-on port 53 { any ; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any ; };
recursion yes;
# forward only;
forwarders {
119.29.29.29;
180.76.76.76;
};
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
http://superrot.blog.51cto.com/6590958/1394689
chown :named /etc/named.conf
rndc-confgen -a
chown :named /etc/rndc.key
chmod 640 /etc/rndc.key
service named start