options {
	directory "/var/cache/bind";

	// If there is a firewall between you and nameservers you want
	// to talk to, you might need to uncomment the query-source
	// directive below.  Previous versions of BIND always asked
	// questions using port 53, but BIND 8.1 and later use an unprivileged
	// port by default.

	// query-source address * port 53;

	// If your ISP provided one or more IP addresses for stable 
	// nameservers, you probably want to use them as forwarders.  
	// Uncomment the following block, and insert the addresses replacing 
	// the all-0's placeholder.

	// ALEX DEHNERT: slightly updated 2008-12-19
	// ALEX DEHNERT: slightly updated 2010-03-01
	forward first;
	forwarders {
		18.71.0.151;
		18.70.0.160;
		18.72.0.3;
	};

	// ALEX DEHNERT: copied from old arctic version on 2008-12-19
	//ALEX DEHNERT: Security-related stuff:
	// Secure(ish):
	allow-recursion	{ 18.208.0.204; 66.92.29.156; 66.92.29.144; 127.0.0.1; 192.168.0.0/16; };
	//allow-query	{ 66.92.29.156; 66.92.29.144; 127.0.0.1; };
	allow-transfer { none; };

	// Insecure:
	//allow-recursion	{ any; };
	allow-query	{ any; };


	auth-nxdomain no;    # conform to RFC1035
	listen-on-v6 { any; };

	// Decent info on DNS
	// http://newweb.zytrax.com/books/dns/ch2/
	// http://www.madboa.com/geek/soho-bind/
};