options {

// Default zone file directory for this dns server
directory "/var/named";

// Who can perform queries against this dns server and get answers (default: any)
allow-query { any; };

// Do we permit recursion for our internal hosts, and retrieve data from the cache for them? (default: no)
recursion yes;

listen-on { any; };

// Who can get entire zone files from this dns server (default : none)
allow-transfer {
127.0.0.1;
10.10.100.3;
};

// How many recursive clients does this dns support per second? (the default is 1000)
recursive-clients 100;

// Do we notify zone changes? Prevent DoD attacks (default: no)
notify yes;

// specifies which hosts are allowed to get answers from the cache (default: any)
allow-query-cache { any; };

// Does this server using two or more master servers? (default: yes)
multi-master yes;

// sets the maximum time (in seconds) for which the server will cache negative (NXDOMAIN) answers
max-ncache-ttl 300; //5min

// Hide version number (default: "")
version "";

// bombing sources add here (default: none)
blackhole { none; };
};

logging {
channel bindlog {
file "/var/log/querylog" versions 3 size 5m;
print-time yes;
print-category yes;
print-severity yes;
};
category xfer-out { bindlog;};
category xfer-in { bindlog;};
category security { bindlog;};
};

// we are the master server for gani.com
zone "gani.com" IN {
        type master;
        file "master/gani.com.frwd.db";

};

zone "100.10.10.in-addr.arpa" IN {
type master;
file "master/gani.com.rev.db";

};




//RNDC

key "rndckey" {
        algorithm hmac-md5;
        secret "bIbdf9g/H5q0zogV48tMWw==";
};

controls {
    inet * port 953
    allow { 127.0.0.1; 10.10.100.0/24; } keys { "rndckey"; };
};

/etc/syslog.conf
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none                /var/log/messages
named                                                   /va/log/querylog

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog


# Log cron stuff
cron.*                                                  /var/log/cron

# Everybody gets emergency messages
*.emerg                                                 *

# Save news errors of level crit and higher in a special file.
uucp,news.crit                                          /var/log/spooler

# Save boot messages also to boot.log
local7.*                                                /var/log/boot.log

daemon.*                              /var/named/chroot/var/log/querylog
# cat /etc/syslog.conf
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none                /var/log/messages
daemon.*                              /var/named/chroot/var/log/querylog

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog

# Log cron stuff
cron.*                                                  /var/log/cron

# Everybody gets emergency messages
*.emerg                                                 *

# Save news errors of level crit and higher in a special file.
uucp,news.crit                                          /var/log/spooler

# Save boot messages also to boot.log
local7.*                                                /var/log/boot.log