bind configuration

1. Forbid recursion
options{
recursion no;
};

options{
  fetch-glue no;
}
Since the bind9 name server does not fetch glue records, bind9 does not use the fetch-glue sub-statement.

2. Restrict query
options{
  allow-query {1.1.1.1/24};
};

acl "dx_bj"{1.1.1.1/20};

zone "abc.com"{
  type slave;
  file "aaa.conf"
  ...
  allow-query {"dx_bj";} ;
}