BIND

ISC BIND for DNS

https://kb.isc.org/docs/aa-00851

https://www.isc.org/downloads/bind/

Education Resources

http://www.zytrax.com/books/dns/

http://www.zytrax.com/books/dns/ch6/

https://dea.nbird.com.au/2015/01/17/bind9-adding-a-forward-only-zone/

https://serverfault.com/questions/426954/bind9-forwarding-by-view

BIND9

Issues

tail -f /var/log/syslog
managed-keys-zone: DNSKEY set for zone '.' could not be verified with current keys

named.conf.options - https://gitlab.isc.org/isc-projects/bind9/-/issues/492

        // dnssec-validation auto;
        dnssec-validation yes;

Example

/etc/bind/named.conf.options

options {
        directory "/var/cache/bind";
        dnssec-validation yes;

        listen-on-v6 { any; };

        recursion yes;
 # allow-recursion { 127.0.0.1; 192.168.0.0/24; 10.10.10.0/24; };
    allow-transfer { none; };
     allow-recursion { any; };
     # allow-query { any; };
     # allow-query-cache { any; };
 forwarders {
                10.250.5.2;
        };
forward only;
querylog yes;
 version "not currently available";

# dnssec-enable yes;
# dnssec-validation yes;
};

sudo vi /etc/bind/named.conf.local

##Add the following to the file.
zone "world.local" in   {
 type forward;
 forward only;
 forwarders { 192.168.38.254; };
};

zone "38.168.192.in-addr.arpa" {
  type forward;
  forward only;
  forwarders { 192.168.38.254; };
 };