initial

named.conf

@@ -0,0 +1,84 @@
+// BIND Configuration for Hidden Primary Server
+
+options {
+    directory "/var/named";
+    pid-file "/var/run/named/named.pid";
+    
+    // Hide version information
+    version "DNS Server";
+    
+    // Listen on all IPv4 interfaces on port 8053
+    listen-on port 8053 { any; };
+    listen-on-v6 { none; };
+    
+    // Allow queries from anywhere (read-only)
+    allow-query { any; };
+    
+    // Disable recursion (authoritative only)
+    recursion no;
+    
+    // Transfer settings
+    also-notify {
+        213.239.242.238;
+        213.133.100.103;
+        193.47.99.3;
+    };
+    
+    // Default transfer restrictions
+    allow-transfer { none; };
+};
+
+// TSIG Key for secure transfers
+key "transfer-key" {
+    algorithm hmac-sha256;
+    secret "REPLACE_WITH_YOUR_BASE64_ENCODED_KEY";
+};
+
+// ACL for secondary servers
+acl "secondaries" {
+    key transfer-key;
+    213.239.242.238;
+    213.133.100.103;
+    193.47.99.3;
+};
+
+// Template for standard zones
+zone-template "standard-zone" {
+    type master;
+    allow-transfer { secondaries; };
+    notify yes;
+    also-notify {
+        213.239.242.238;
+        213.133.100.103;
+        193.47.99.3;
+    };
+};
+
+// Zone configurations using template
+zone "whiskeylimahotel.de" using-template "standard-zone" {
+    file "whiskeylimahotel.de.zone";
+};
+
+// Logging configuration
+logging {
+    channel default_log {
+        file "/var/log/named/named.log" versions 3 size 5m;
+        severity info;
+        print-time yes;
+        print-severity yes;
+        print-category yes;
+    };
+    
+    channel transfer_log {
+        file "/var/log/named/transfers.log" versions 3 size 5m;
+        severity info;
+        print-time yes;
+        print-severity yes;
+        print-category yes;
+    };
+    
+    category default { default_log; };
+    category xfer-in { transfer_log; };
+    category xfer-out { transfer_log; };
+    category notify { transfer_log; };
+};