(view this code in a separate window)

//
// Sample external BIND nameserver configuration settings
//

options {
  recursion no;  // Don't answer queries for zones we don't control!
};


 acl "our-dns-servers" {
  172.16.1.2;  // ns1.example.com
  172.16.2.2;  // ns2.example.com
  192.168.5.3; // ns3.example.com
};

zone "example.com" {  // Our domain name
  type master;
  file "master/example.com";
  allow-query {
    any;       // Everyone must be able to query this domain!
  };
  allow-transfer {
    our-dns-servers;  // But only our nameservers can do zone transfers
  };
};