// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

//key "ddns" {
//        algorithm hmac-md5;
//        secret "GAgsKfYTueMc4lawB8qKzg==";
//};

zone "kasumiksm.com" IN {
        type master;
        file "/var/cache/bind/kasumiksm.com.zone";
};
// 添加一个正向解析的区域，当需要查询的域名的根域名为kasumiksm.com时
// 均会查询该区域。即不可将携带其他根域名的域名放在该区域。
// 如需让该区域负责所有.com结尾的域名时，将"kasumiksm.com"改为
// "com"即可（未测试）
zone "117.1.in-addr.arpa" IN {
        type master;
        file "/var/cache/bind/ip.zone";
};
// 添加一个反向解析的区域，并非必须的区域，当需要查询的ip的头几位为1.117时
// 将进入该区域查询，勿将其他开头的ip地址放入该区域(注意这里的ip需反向写)
// 如需将该区域设置为反向解析所有的ip，则将"117.1.in-addr.arpa"改为
// "in-addr.arpa"即可（已测试）

options {
        directory "/var/cache/bind";
		//设置工作路径

        // If there is a firewall between you and nameservers you want
        // to talk to, you may need to fix the firewall to allow multiple
        // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.

        // forwarders {
        //      0.0.0.0;
        // };

        //========================================================================
        // If BIND logs error messages about the root key being expired,
        // you will need to update your keys.  See https://www.isc.org/bind-keys
        //========================================================================
        dnssec-validation auto;

        listen-on-v6 { any; };
	//开启listen-on-v6就会默认也监听ipv4。
	//listen-on { 5.6.7.8; };会默认监听5.6.7.8:53，即在5.6.7.8监听53端口
	//listen-on port 1234 { 127.0.0.1; };会监听127.0.0.1:1234
        allow-query {any;};
	//定义可以进行dns查询的主机,如：allow-query {127.0.0.1;};只能通过本机查询
	//allow-query也能在zone语句中设定，这样全局options中的allow-query选项
	//在这里就不起作用了。
        auth-nxdomain no;
	//默认即可
};

$TTL	10 //ttl 10秒	//dns服务器的域名	//管理员的邮箱，为了防止歧义将@改为.
@       IN      SOA     dns.kasumiksm.com.      1412251241.qq.com.(
                                10 ;serial //序列号
                                1M ;refresh
                                1M ;retry
                                1M ;expire
                                1M) ;negative cache ttl
//域名	interntet 记录类型 正向解析的结果	
@       IN      NS      dns.kasumiksm.com.
dns     IN      A       1.117.247.180
webdav  IN      A       2.117.2.2
abc     IN      A       2.117.2.2

$TTL    10
@       IN      SOA     dns.kasumiksm.com.      1412251241.qq.com.(
                                10      ;serial
                                1M  ;refresh
                                1M   ;retry
                                1M ;expire
                                1M) ;negative cache ttl
@       IN      NS      dns.kasumiksm.com.
180.247.117.1   IN      PTR     dns.kasumiksm.com.
2.2.117.2       IN      PTR     webdav.kasumiksm.com.
2.2.117.2       IN      PTR     abc.kasumiksm.com.