options {
	directory "/var/cache/bind";
	forwarders {
	 	1.0.0.2;
	 	9.9.9.9;
	};
	
  allow-query {  any;};

  dnssec-validation no;

  auth-nxdomain no;    # conform to RFC1035
  listen-on-v6 { any; };

  tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";

  minimal-responses yes;
};