#yum install bind
#ifconfig

eth0 
inet addr: 10.0.2.15

#vi /etc/sysconfig/network-scripts/ifcfg-eth0 
DEVICE=eth0
NM_CONTROLLED=no
ONBOOT=yes
IPADDR=10.0.2.15
BOOTPROTO=none
NETMASK=255.255.255.0
DNS=10.90.12.1
TYPE=Ethernet
IPV6INIT=no
USERCTL=no

#vim /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=station.example.com

# vim /etc/hosts
0.20.2.15      station.example.com     station

#vim /etc/resolv.conf
search station.example.com
nameserver 10.0.2.15

#hostname station.example.com

#cp /etc/named.conf  /var/named/chroot/etc/named.conf
cp: cannot create regular file `/var/named/chroot/etc/named.conf`: No such file or directory

#vi /etc/named.conf
//no content

#rpm -qa | grep bind
ypbind-1.20.4-29.el6.x86_64
samba-winbind-clients-3.5.10-125.el6.x86_64
bind-utils-9.8.2-0.10.rc1.el6.x86_64
PackageKit-device-rebind-0.5.8-20.el6.x86_64
rpcbind-0.2.0-9.el6.x86.64
bind-libs-9.8.2-0.10.rc1.el6.x86_64

// Red Hat BIND Configuration Tool
 // Default initial "Caching Only" name server configuration
 acl "example" { 16.10.1.0/16; };
 options {
 listen-on port 53 { 16.10.1.21; };
 directory "/var/named";
 dump-file "/var/named/data/cache_dump.db";
 statistics-file "/var/named/data/named_stats.txt";
 allow-recursion { example; };
 allow-transfer { none; };
 allow-query { any; };
 notify no;
 transfer-format many-answers;
 interface-interval 0;
 max-transfer-time-in 60;
 version "Not Available";
 /*
 * If there is a firewall between you and nameservers you want
 * to talk to, you might need to uncomment the query-source
 * directive below.  Previous versions of BIND always asked
 * questions using port 53, but BIND 8.1 uses an unprivileged
 * port by default.
 */
 // query-source address * port 53;
 dnssec-enable yes;
 dnssec-validation yes;
 dnssec-lookaside . trust-anchor dlv.isc.org.;
 };
 // a caching only nameserver config
 controls {
 inet 127.0.0.1 allow { localhost; } keys { rndckey; rndc-key; };
 };
 server 16.10.1.21 {
 keys { rndckey; };
 };
 zone "." IN {
 type hint;
 file "named.root";
 };
 // Now register your domain name and database/zone file
 // record better before the line "include /etc/rndc.key"
 // You can include separate zone entry
 // file with "include /etc/myinternalzonefile.zones" within this named.conf file.
 //Name Zone Registration
 zone "example.com" IN {
 type master;
 file "example.for";
 allow-transfer { none; };
 };
 // Reverse Zone Rsegistration
zone "1.10.16.in-addr.arpa" IN {
 type master;
 file "example.rev";
 allow-transfer { none; };
 };
//include the rndc key like below (copy-past from rndc.key created earlier)
 key rndckey {
 algorithm hmac-md5;
 secret "Hi1V+y3WixmfEfGqrebKRA==";
 };
 key rndc-key {
 algorithm hmac-md5;
 secret "AoXEyjm6UUKu4cKqFoFMRg==";
 };
 trusted-keys {
 dlv.isc.org. 257 3 5 "BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URkY62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboMQKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VStTDN0YUuWrBNh";
 };