//
// Do any local configuration here
//

acl "xfer" {
    none;   // Allow no transfers.  If we have other
            // name servers, place them here.
};

acl "trusted" {
    // Place our internal and DMZ subnets in here so that
    // intranet and DMZ clients may send DNS queries.  This
    // also prevents outside hosts from using our name server
    // as a resolver for other domains.
<% dns_client_networks.each do |network| -%>
    <%= network %>;
<% end -%>
    localhost;
};

<% dns_zones.each do |zone| -%>
    <% if zone.match(/\//) %>
        include "/etc/bind/zone.<%= zone.sub(/\//, '-') %>";
    <% else %>
        include "/etc/bind/zone.<%= zone %>";
    <% end -%>
<% end -%>

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";