BIND : Configure for External Network2023/04/24

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
# add
include "/etc/bind/named.conf.external-zones";

options {
        directory "/var/cache/bind";

.....
.....

        # add : receive queries from all hosts
        allow-query { any; };
        # network range you allow to transfer zone files to clients
        # add secondary DNS servers if it exist
        allow-transfer { localhost; };
        # add : not allow recursion
        recursion no;

        //=======================================================================
        // If BIND logs error messages about the root key being expired,
        // you will need to update your keys.  See https://www.isc.org/bind-keys
        //=======================================================================

        dnssec-validation auto;

        # if not listen IPV6, change [any] to [none]
        listen-on-v6 { any; };
};

# create new
# add zones for your network and domain name
zone "srv.world" IN {
        type master;
        file "/etc/bind/srv.world.wan";
        allow-update { none; };
};
zone "80.0.16.172.in-addr.arpa" IN {
        type master;
        file "/etc/bind/80.0.16.172.db";
        allow-update { none; };
};