// // Sample external BIND nameserver configuration settings // options { recursion no; // Don't answer queries for zones we don't control! }; acl "our-dns-servers" { 172.16.1.2; // ns1.example.com 172.16.2.2; // ns2.example.com 192.168.5.3; // ns3.example.com }; zone "example.com" { // Our domain name type master; file "master/example.com"; allow-query { any; // Everyone must be able to query this domain! }; allow-transfer { our-dns-servers; // But only our nameservers can do zone transfers }; };