Guruhowtos

This section describes the use of the acl (Access Control List) clause available in BIND 9.x named.conf. The ‘acl’ clause allows fine-grained control over what hosts or users may perform what operations on the name server.
acl clause syntax
acl acl-name {
address_match_list
};
acl’s define a address_match_list e.g. IP address(es), which are then referenced (used) in a [...]

Assuming you have updated the ports-dns collection proceed as normal:
cd /usr/ports/dns/bind9
make install clean
The above sequence installs BIND9 in /usr/local/sbin and the tools in /usr/local/bin and assumes the named.conf file is in /usr/local/etc.
If you want to run BIND9 at startup you must edit /etc/rc.conf as follows:
# add following line if not present
named_enable=”YES”
# the line below must [...]

Administrative tools play an integral part in the management of a server.

named-checkconf
The named-checkconf program checks the syntax of a named.conf file. 

named-checkconf [-jvz] [-t directory] [filename]

named-checkzone
The named-checkzone program checks a master file for syntax and consistency. 

named-checkzone [-djqvD] [-c class] [-o output] [-t directory] [-w directory] [-k (ignore|warn|fail)] [-n(ignore|warn|fail)] [-W (ignore|warn)] zone [filename]

named-compilezone
Similar to named-checkzone, but it always dumps the zone content to a specified file (typically in a different format). 

rndc
The remote name daemon control (rndc) [...]

This section describes several indispensable diagnostic, administrative and monitoring tools available to the system administrator for controlling and debugging the name server daemon.

Diagnostic Tools

The dig, host, and nslookup programs are all command line tools for manually querying name servers. They differ in style and output format.

dig
The domain information groper (dig) is the most versatile and complete of these lookup [...]

Hardware Requirements

DNS hardware requirements have traditionally been quite modest. For many installations, servers that have been pensioned off from active duty have performed admirably as DNS servers.
The DNSSEC features of BIND 9 may prove to be quite CPU intensive however, so organizations that make heavy use of these features may wish to consider larger systems for these applications. BIND 9 is fully [...]

Before we start, you will need a linux box with ISC-BIND installed. For this tutorial I will be using CentOS 4.4 with the following packages installed.

bind-9.2.4-24.EL4
bind-chroot-9.2.4-24.EL4
bind-libs-9.2.4-24.EL4
bind-utils-9.2.4-24.EL4
caching-nameserver-7.3-3

If you are using CentOS or any other linux that uses YUM (Yellowdog Updater Modified) package management you can install the packages by using the following command:
yum install bind bind-chroot bind-libs bind-utils caching-nameserver
If your [...]

BIND 9 fully supports all currently defined forms of IPv6 name to address and address to name lookups. It will also use IPv6 addresses to make queries when running on an IPv6 capable system.
For forward lookups, BIND 9 supports both A6 and AAAA records. The use of A6 records has been moved [...]

In this section we provide some suggested configurations along with guidelines for their use. We also address the topic of reasonable option setting.

3.1. Sample Configurations

3.1.1. A Caching-only Nameserver
The following sample configuration is appropriate for a caching-only name server for use by clients internal to a corporation. All queries from outside clients [...]

A hostname DNS entry is required if the subdomain is pointing to a different IP address than that set for the domain name. Add the address (A) records to the forward lookup zone of the parent domain and associate the address records with the IP addresses of the web servers, which will handle the requests [...]

A forwarding (a.k.a. Proxy, Client, Remote) server is one which simply forwards all requests to another DNS and caches the results. On its face this look a pretty pointless exercise. However a forwarding DNS sever can pay-off in two ways where access to an external network is slow or expensive:

Local DNS server caching – reduces [...]