include "/etc/bind/rndc.key";
controls {
  inet 127.0.0.1 allow {localhost;} keys {"rndc-key";};
};

acl cachenetworks {  127.0.0.0/24;  };
acl dn42-dns { 172.20.129.2; 172.20.1.255; 172.22.76.110; 172.20.14.33; };

options {
  directory "/run/named";
  pid-file "/run/named/named.pid";

  # Server Identity
  version "420.69";
  server-id "zaphod";
  hostname "zaphod";

  # Enable DNSSEC
  dnssec-validation no;

  # Only listen to local addresses
  listen-on {  127.0.0.1;  };
  listen-on-v6 {  ::1;  };
  allow-query { any; };
  # disable the integrated handling of RFC1918 and non-assigned IPv6 space reverse dns
  empty-zones-enable no;
  validate-except {
    # DN42 Zones
    "dn42";
    "20.172.in-addr.arpa";
    "21.172.in-addr.arpa";
    "22.172.in-addr.arpa";
    "23.172.in-addr.arpa";
    "10.in-addr.arpa";
    "d.f.ip6.arpa";
    # ChaosVPN Zones
    "hack";
    "31.172.in-addr.arpa";
    "100.10.in-addr.arpa";
    "101.10.in-addr.arpa";
    "102.10.in-addr.arpa";
    "103.10.in-addr.arpa";

    # NeoNetwork Zones
    "neo";
    "127.10.in-addr.arpa";
    "7.2.1.0.0.1.d.f.ip6.arpa";
  };

  # Recursion settings
  recursion yes;
  allow-recursion { any; };
  allow-recursion-on { any; };
  allow-query-cache { any; };
  allow-query-cache-on { any; };
  prefetch 10;
};

# DN42 Zones
zone "dn42" {
  type forward;
  forward only;
  forwarders { 172.20.0.53; 172.23.0.53; };
};
zone "20.172.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.20.0.53; 172.23.0.53; };
};
zone "21.172.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.20.0.53; 172.23.0.53; };
};
zone "22.172.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.20.0.53; 172.23.0.53; };
};
zone "23.172.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.20.0.53; 172.23.0.53; };
};
zone "10.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.20.0.53; 172.23.0.53; };
};
zone "d.f.ip6.arpa" {
  type forward;
  forward only;
  forwarders { 172.20.0.53; 172.23.0.53; };
};

# ChaosVPN Zones
zone "hack" {
  type forward;
  forward only;
  forwarders { 172.31.0.5; 172.31.255.53; };
};
zone "31.172.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.31.0.5; 172.31.255.53; };
};
zone "100.10.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.31.0.5; 172.31.255.53; };
};
zone "101.10.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.31.0.5; 172.31.255.53; };
};
zone "102.10.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.31.0.5; 172.31.255.53; };
};
zone "103.10.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 172.31.0.5; 172.31.255.53; };
};

# NeoNetwork
zone "neo" {
  type forward;
  forward only;
  forwarders { 10.127.255.53; };
};
zone "127.10.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 10.127.255.53; };
};
zone "7.2.1.0.0.1.d.f.ip6.arpa" {
  type forward;
  forward only;
  forwarders { 10.127.255.53; };
};

zone "crxn" {
  type forward;
  forward only;
  forwarders { fd92:58b6:2b2::5353; };
};
# Fallback root zone
zone "." {
  type forward;
  forward only;
  forwarders { 100.123.15.72; 9.9.9.9; };
};