options {
        version "";
        directory "/var/cache/bind";
        port 53;

        dnssec-enable yes;
        dnssec-validation yes;
        auth-nxdomain no;
        recursion yes;

        forward only;
        forwarders {
                1.1.1.1;
                8.8.8.8;
        };

        allow-query { any; };
        allow-query-cache { any; };
        allow-recursion { any; };

        listen-on { any; };
        listen-on-v6 { none; };

        response-policy { zone "rpz"; };
};