acl "trusted" {
     192.168.1.0/24;
     192.168.50.0/24;
     192.168.70.0/24;
     172.16.0.0/16;
     localhost;
     localnets;
};


options {
  directory "/var/cache/bind";

  // version statement - inhibited for security
  // (avoids hacking any known weaknesses)»·
  version "ShareWiz DNS";

  // If there is a firewall between you and nameservers you want
  // to talk to, you may need to fix the firewall to allow multiple
  // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

  // If your ISP provided one or more IP addresses for stable·
  // nameservers, you probably want to use them as forwarders.··
  // Uncomment the following block, and insert the addresses replacing·
  // the all-0's placeholder.

  // forwarders {
  //   0.0.0.0;
  // };

  forwarders {
    // Sure Public DNS
    //83.137.248.244;
    //93.187.151.197;

    // Google Public DNS
    //8.8.8.8;
    //8.8.4.4;

    // OpenDNS
    //208.67.222.222;
    //208.67.220.220;
    
    // PI-Hole.
    192.168.1.26;
    192.168.1.25;
  };


  //========================================================================
  // If named logs error messages about the root key being expired,
  // you will need to update your keys.  See https://www.isc.org/named-keys
  //========================================================================
  #dnssec-validation auto;
  dnssec-enable no;
  dnssec-validation no;

  auth-nxdomain no;    # conform to RFC1035
  listen-on-v6 { any; };

  allow-query { any; };
  allow-transfer { trusted; };
  #allow-recursion { trusted; };
};