options {
    	directory "/var/named";
    	recursion no;
    	transfers-in 200;
    	transfers-per-ns 200;
    	notify yes;
    	version "Contact.wg-dns(at)fccn.pt.for.more.information";
	pid-file "/var/named/named.pid";
	max-transfer-time-out 480; # 8 horas : por causa do hostcount
	dnssec-enable yes;
	dnssec-validation yes;
	key-directory "/var/named/keys";	
};

logging {
        channel queries { 
                print-category yes; 
                syslog local0;
                print-severity yes;
                severity debug 6;
                print-time yes; 
        };  
        channel config { 
                print-category yes; 
                syslog local1;
                print-severity yes;
                severity debug 6;
                print-time yes; 
        }; 
        channel xfer { 
                print-category yes; 
                syslog local2;
                print-severity yes;
                severity debug 6;
                print-time yes; 
        };   
        channel security { 
                print-category yes; 
                syslog local3;
                print-severity yes;
                severity debug 6;
                print-time yes; 
        };    
        channel default { 
                print-category yes; 
                syslog local4;
                print-severity yes;
                severity debug 6;
                print-time yes; 
        };
		 channel dnssec {
                print-category yes; 
                syslog local5;
                print-severity yes;
                severity debug 6;
                print-time yes; 
        };
        	
	category default         { default; };
    	category general         { default; };
	category config          { config; };
    	category queries         { queries; };
 	category client          { queries; };       
	category xfer-in         { xfer; };
    	category xfer-out        { xfer; };
    	category notify          { xfer; };
	category update		 { xfer; };
	category update-security { xfer; };
    	category security        { security; };
    	category dnssec          { security; };
	category dnssec 	 { dnssec; };
};

controls { 
	inet 127.0.0.1 port 953
	allow {127.0.0.1; } keys { "rndc-key"; };
};

zone "." {
        type hint;  
        file "cache/named.root";
};

zone "zona01.dnssec.pt" {
        type master;
        file "primary/zona01.dnssec.pt/zona01.dnssec.pt";
        allow-transfer { 193.65.36.1; };
};

zone "zona02.dnssec.pt" {
        type slave;
        file "secondary/zona02.dnssec.pt";
        masters { 193.65.36.2; };
};

key "rndc-key" {
        algorithm hmac-md5;
        secret "ksdksdjksjthggdskds==";
};