$ cat /etc/bind/named.conf
options {
	directory "/var/cache/bind";

	dnssec-validation auto;

	auth-nxdomain no;    # conform to RFC1035
	listen-on-v6 { any; };
	listen-on { 127.0.0.1; };

	allow-transfer {"none";};
	allow-recursion { localhost; ::1; };
};

include "/etc/bind/rndc.key";
include "/etc/bind/zones.conf";