title: Bind zones good practices
body: <p>I'm relatively new to Bind/DNS zones but have been reading a lot into it lately and was passed a link to check the DNS out.  I ran the checks which can be seen via: <a href="http://intodns.com/empireconqueror.com" rel="nofollow">http://intodns.com/empireconqueror.com</a></p>
  
  <p>The issue is there seems to be a lot of issues still wrong with the zone, there seems to be no information regarding those errors on the Internet so I come here seeking help.</p>
  
  <p>My options are as follows:</p>
  
  <pre><code>options {
      directory "/var/cache/bind";
  
      // If there is a firewall between you and nameservers you want
      // to talk to, you may need to fix the firewall to allow multiple
      // ports to talk.  See http://www.kb.cert.org/vuls/id/800113
  
      // If your ISP provided one or more IP addresses for stable
      // nameservers, you probably want to use them as forwarders.
      // Uncomment the following block, and insert the addresses replacing
      // the all-0's placeholder.
  
      //forwarders {
      //      199.115.230.239;
      //};
  
      allow-query {
              any;
      };
  
      auth-nxdomain no;    # conform to RFC1035
      listen-on-v6 { any; };
  
      allow-recursion { localhost; };
  };
  </code></pre>
  
  <p>And for the actual zone options:</p>
  
  <pre><code>include "/etc/bind/named.conf.options";
  
  view "external-in" in {
      match-clients { any; };
      allow-query { none; };
      allow-query-cache { none; };
      recursion no;
      additional-from-auth yes;
      additional-from-cache yes;
  
      include "/etc/bind/named.conf.default-zones";
  };
  </code></pre>
  
  <p>Here's a master zone example:</p>
  
  <pre><code>zone "empireconqueror.com" {
      type master;
      file "/ect/bind/db.empireconqueror.com";
  };
  </code></pre>
  
  <p>Database file:</p>
  
  <pre><code>$TTL    86400
  $ORIGIN empireconqueror.com.
  @       IN      SOA     ns2.webserverhome.com. hostmaster.empireconqueror.com. (
                            2002022401
                            28800
                            7200
                            864000
                            86400
                           )
  ; Root site
      IN      A       199.115.230.240
  
  ; Nameservers
      IN      NS      ns1.webserverhome.com.
      IN      NS      ns2.webserverhome.com.
  
  ; Aliases
  www     IN      CNAME   empireconqueror.com.
  fb      IN      CNAME   empireconqueror.com.
  mail    IN      CNAME   ghs.google.com.
  
  ; MX Records
      IN      MX      1       aspmx.l.google.com.
      IN      MX      5       alt1.aspmx.l.google.com.
      IN      MX      5       alt2.aspmx.l.google.com.
      IN      MX      10      aspmx2.googlemail.com.
      IN      MX      10      aspmx3.googlemail.com.
  </code></pre>
  
  <p>Many thanks for helping out,
  Shaun</p>