Listing 3. DNSSEC-Enabled named.conf.local

acl mynetworks { 192.168.100.0/24; 10.10.0.0/16; };

options {
        directory "/var/cache/bind";
        allow-query { mynetworks; };
        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { none; };
        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;
};
managed-keys {
        "." initial-key 257 3 8 "
        AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
        bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
        /RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
        JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
        oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
        LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
        Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
        LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ";
};