BIND 9.7 configuration

[root@localhost ~]# cat /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
listen-on port 53 { 127.0.0.1; 172.16.52.182; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

zone "example.com" IN {
type master;
file "example.com";
};

[root@localhost ~]# cat /var/named/example.com
$TTL 1D
$ORIGIN example.com.
@ IN SOA master rname.invalid. (
1 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS master
master A 172.16.52.182
www A 172.16.52.182
_443._tcp.www IN TYPE65468 \# 34 0101D1A0F378F90614277D1677F3ADF67FD56390009BDFFB6A3429C421A26E37FE22

The record at _443._tcp.www was generated by the dane tool and uses a temporary record type waiting for the TLSA to get an official number assigned.