key rndc_key {
    secret "1234abcd8765";
	algorithm hmac-sha256;
};

controls {
	inet 10.53.0.1 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

options {
	query-source address 10.53.0.1;
	notify-source 10.53.0.1;
	transfer-source 10.53.0.1;
	port @PORT@;
	listen-on { 10.53.0.1; };
	pid-file "named.pid";
	notify no;
	dnssec-validation no;
	allow-query { any; };
	recursion yes;
	allow-recursion { any; };

	response-policy {
		zone "rpz.local";
	};
};

logging {
     channel rpz_passthru {
          file "rpz_passthru.txt" versions 3 size 5m;
          print-time yes;
          print-category yes;
          print-severity yes;
          severity info;
     };

     channel rpz_log {
          file "rpz.txt" versions 3 size 20m;
          print-time yes;
          print-category yes;
          print-severity yes;
          severity info;
     };

     category rpz { rpz_log; default_debug; };
	 category rpz-passthru { rpz_passthru; default_debug; };
};

zone "rpz.local" {
    type primary;
    file "rpz.local.db";
    allow-transfer { none; };
    allow-query { localhost; };
};

zone "." {
	type hint;
	file "root.db";
};


