acl accept { 10.53.0.2; };

acl badaccept { 10.53.0.1; };

key one {
	algorithm @DEFAULT_HMAC@;
	secret "1234abcd8765";
};

key two {
	algorithm @DEFAULT_HMAC@;
	secret "1234efgh8765";
};

options {
	port @PORT@;
	pid-file "named.pid";
	listen-on { 10.53.0.2; };
	listen-on-v6 { none; };
	recursion no;
	dnssec-validation no;
};

include "controls.conf";

zone "." {
	type hint;
	file "../../_common/root.hint";
};

zone "normal.example" {
	type primary;
	file "generic.db";
};

zone "any.example" {
	type primary;
	file "generic.db";
	allow-query { any; };
};

zone "none.example" {
	type primary;
	file "generic.db";
	allow-query { none; };
};

zone "addrallow.example" {
	type primary;
	file "generic.db";
	allow-query { 10.53.0.2; };
};

zone "addrnotallow.example" {
	type primary;
	file "generic.db";
	allow-query { 10.53.0.1; };
};

zone "addrdisallow.example" {
	type primary;
	file "generic.db";
	allow-query { ! 10.53.0.2; };
};

zone "aclallow.example" {
	type primary;
	file "generic.db";
	allow-query { accept; };
};

zone "aclnotallow.example" {
	type primary;
	file "generic.db";
	allow-query { badaccept; };
};

zone "acldisallow.example" {
	type primary;
	file "generic.db";
	allow-query { ! accept; };
};

/* Also usable for testing key not allowed */
zone "keyallow.example" {
	type primary;
	file "generic.db";
	allow-query { key one; };
};

zone "keydisallow.example" {
	type primary;
	file "generic.db";
	allow-query { ! key one; };
};
