acl local-network { 192.168.10.0/24; }; options { directory "/var/cache/bind"; allow-query { localhost; local-network; }; allow-recursion { localhost; local-network; }; allow-query-cache { localhost; local-network; }; forwarders { XXX.XXX.XXX.XXX; }; dnssec-validation auto; };