ddns-update-style interim;
ddns-updates on;
ddns-domainname "bencloud.net.";
ddns-rev-domainname "in-addr.arpa.";
ignore client-updates;
one-lease-per-client true;
allow bootp;
authoritative;
include "/etc/rndc.key";
option T150 code 150 = string;

zone bencloud.net. {
    primary 127.0.0.1;
    key rndckey;
}

zone 0.0.10.in-addr.arpa. {
	primary 127.0.0.1;
	key rndckey;
}

#
# DHCP Server Configuration file.
#   see /usr/share/doc/dhcp*/dhcpd.conf.sample  
#


host xbox.bencloud.net {
    hardware ethernet 00:12:5a:80:cb:c4;
    fixed-address 10.0.0.3;
}
host benap.bencloud.net {
    hardware ethernet 00:16:c7:a0:c2:b8;
    fixed-address 10.0.0.2;
}
subnet 10.0.0.0 netmask 255.255.255.0 {
    interface br0;
    range 10.0.0.50 10.0.0.128;
    default-lease-time 6000;
    max-lease-time 7200;
    option domain-name "bencloud.net";
    option subnet-mask 255.255.255.0;
    option broadcast-address 10.0.0.255;
    option routers 10.0.0.1;
    option domain-name-servers 10.0.0.1;
    option time-offset -3600;


}

// Red Hat BIND Configuration Tool
// 
// Default initial "Caching Only" name server configuration
//
include "/etc/rndc.key";

controls {inet 127.0.0.1 allow { localhost; } keys { rndckey; };};

options {

forwarders {	192.168.2.1 port 53;
};






directory "/var/named";
	dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
	/*
	 * If there is a firewall between you and nameservers you want
	 * to talk to, you might need to uncomment the query-source
	 * directive below.  Previous versions of BIND always asked
	 * questions using port 53, but BIND 8.1 uses an unprivileged
	 * port by default.
	 */
	 // query-source address * port 53;
};

zone "51.92.69.IN-ADDR.ARPA." IN {
	type master;
	file "69.92.51.db";
};
zone "0.0.10.IN-ADDR.ARPA." IN {
	type master;
	file "10.0.0.db";
        allow-update { key rndckey; };
        notify yes;
};
zone "bencloud.net." IN {
	type master;
	file "bencloud.net.db";
        allow-update { key rndckey; };
        notify yes;
};
zone "." IN {
	type hint;
	file "named.root";
};

zone "localdomain." IN {
	type master;
	file "localdomain.zone";
	allow-update { none; };
};

zone "localhost." IN {
	type master;
	file "localhost.zone";
	allow-update { none; };
};

zone "0.0.127.in-addr.arpa." IN {
	type master;
	file "named.local";
	allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa." IN {
        type master;
	file "named.ip6.local";
	allow-update { none; };
};

zone "255.in-addr.arpa." IN {
	type master;
	file "named.broadcast";
	allow-update { none; };
};

zone "0.in-addr.arpa." IN {
	type master;
	file "named.zero";
	allow-update { none; };
};

 // add the following section. A log file "dns-security.log" will be created
 // in the named directory
 logging {
    category dnssec   { security_log; };
    category update   { security_log; };
    category security { security_log; };

    channel security_log {
        file "dns-security.log" versions 5 size 20m;
            // every time the log grows over 20 Mbyte, it will
            // backup and rollover. Maximum 5 backups will be kept.
        print-time yes;
        print-category yes;
        print-severity yes;
        severity info;
    };
 };