BIND9 master + slave + sec

named.conf.options

acl dnsy { $IP;
           127.0.0.1;
         };

options {
        directory "/var/cache/bind";

        dnssec-validation auto;

        auth-nxdomain no;    # conform to RFC1035

        allow-recursion { dnsy; };
        allow-transfer { dnsy; };
        recursion yes;
        version "DNS";
        listen-on-v6 { none; };

};

named.conf MASTER

zone "test.net" { type master; file "/etc/bind/test.net.db"; also-notify { $IP; }; allow-transfer { $IP; }; notify yes; };

named.conf SLAVE


zone "test.net" { type slave; masters { $IP; }; file "test.net.db"; };