options {
listen-on port 53 { any ; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any ; };
recursion yes;# forward only;
forwarders {
119.29.29.29;
180.76.76.76;
}; dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto; /* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic";
};
http://superrot.blog.51cto.com/6590958/1394689chown :named /etc/named.confrndc-confgen -a
chown :named /etc/rndc.key
chmod 640 /etc/rndc.keyservice named start