# Allow internal nameservers antimony and ronne to slave .lgw01.scalingstack TLD zone.
acl canonical-int-ns { 91.189.90.151; 91.189.89.192;  };

options {
        directory "/var/cache/bind";

        forwarders {
              91.189.94.2;
              91.189.94.2;
        };

        dnssec-validation auto;

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };

        # anyone can ask questions, the nameservers we care about can transfer
        allow-query { any; };
        allow-transfer { 10.222.64.1; canonical-int-ns; };

        # notify internal nameservers
        notify explicit;
        also-notify { 91.189.90.151; 91.189.89.192;  };

        # the clients all use us for resolution
        allow-query-cache { 10.222.64.0/18; };
        recursion yes;
};

zone "."  { type master; file "/etc/bind/db.special"; };