key SecDNS { algorithm hmac-md5; secret "SuperSecretKeyForDNSUpdates"; // Not my real key }; server 192.168.10.20 { keys { SecDNS ;}; }; zone "home.lan" { type master; file "/etc/bind/home.lan.hosts"; allow-update { key SecDNS; }; allow-query { homenet; }; }; zone "10.168.192.in-addr.arpa" { type master; file "/etc/bind/192.168.10.rev"; allow-update { key SecDNS; }; allow-query { homenet; }; };