acl internal-network {
10.0.0.0/8;
103.102.13.0/24;
103.105.217.0/24;
103.107.71.0/24;
103.107.84.0/23;
103.108.187.0/24;
103.130.80.0/23;
103.136.182.0/23;
103.141.230.0/23;
103.142.210.0/23;
103.142.88.0/23;
103.146.105.0/24;
103.147.115.0/24;
103.148.2.0/23;
103.148.24.0/23;
103.156.74.0/23;
103.158.252.0/23;
103.164.235.0/24;
103.166.226.0/23;
103.166.32.0/23;
103.167.11.0/24;
103.167.170.0/23;
103.168.186.0/23;
103.177.255.0/24;
103.177.92.0/23;
103.178.12.0/23;
103.186.8.0/23;
103.186.90.0/23;
103.190.94.0/24;
103.190.94.19/32;
103.245.159.0/24;
103.66.62.0/24;
127.0.0.1/32;
157.15.82.0/23;
157.15.82.0/24;
157.15.83.0/24;
172.16.0.0/12;
172.16.77.0/24;
192.168.0.0/16;
202.56.170.0/23;
        };
options {
        directory "/var/cache/bind";
        // If there is a firewall between you and nameservers you want
        // to talk to, you may need to fix the firewall to allow multiple
        // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.
	querylog yes;
	//RPZ//
	response-policy {
	zone "trustpositifkominfo" policy cname lamanlabuh.aduankonten.id;
	zone "rpz-doh";
	zone "local-rpz";
	 };

	//MUNIN-EXPOR//

        statistics-file "/var/cache/bind/named.stats";
        allow-recursion { any; };
        allow-query-cache { any; };

	minimal-responses yes;
	allow-query { localhost; internal-network; };
        //========================================================================
        // If BIND logs error messages about the root key being expired,
        // you will need to update your keys.  See https://www.isc.org/bind-keys
        //========================================================================
        dnssec-validation no;

};
zone "trustpositifkominfo" IN {
        type slave;
        allow-query     { localhost; internal-network; 157.15.83.83; 103.148.45.45; };
        masters { 103.148.44.44; 139.255.196.202;  };
        file "/var/cache/bind/db.rpz";
        allow-transfer {  157.15.83.83;103.105.217.234; 172.16.77.0/24; };
};
zone "local-rpz" IN {
        type master;
        allow-query     { localhost; internal-network; 157.15.83.83; 103.148.45.45; };
        file "/var/cache/bind/local.rpz";
	allow-transfer {103.158.252.32;103.105.217.234; };
};


zone "rpz-doh" {
    type master;
    allow-query     { localhost; internal-network; 157.15.83.83; 103.148.45.45; };
    file "/etc/bind/db.rpz.doh";
};

zone "tokopedia.com" IN {
    type forward;
    forward only;
    forwarders { 1.1.1.1; 1.0.0.1; };
};

zone "tokopedia-static.net" IN {
    type forward;
    forward only;
    forwarders { 1.1.1.1; 1.0.0.1; };
};


zone "tokopedia.net" IN {
    type forward;
    forward only;
    forwarders { 1.1.1.1; 1.0.0.1; };
};

zone "tokopedia-static.net.edgesuite.net" IN {
    type forward;
    forward only;
    forwarders { 1.1.1.1; 1.0.0.1; };
};

logging {
        channel query {
                file "/var/log/named/query.log" versions 2 size 1m;
                print-time yes;
                // Set the severity to dynamic to see all the debug messages
                severity info;
        };
        category queries { query; };
};