bind 9 as a resolver only form my network

hi all

I have my own ip class (256 ip's... bgp)
now i'm using google ns servers
i want to use my own server's for rezolve name's and I want this server's to be used only for my ip class. It should cache rezult's. I want to be secure as possible, to not be used for ddos...etc.

I have done a test and it works. Here is my named.conf

Code:

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { any; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
zone "." IN {
        type hint;
        file "named.ca";
};
include "/etc/named.conf.local";

but I belive in this configuration... any can use it as a dns server... and i don't want this. Allso I belive it is "opened" to be used for ddos attack.

thanks

 

why ?

for the other problem ... use ACL's