rndc 放在named.conf的什么位置？

这个一个完整的/etc/named.conf  看看有没有什么错误

ey "rndc-key" { algorithm hmac-md5; secret "SOMEKEYHERE"; };
controls { inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; }; };

acl "cnc" { 待填 ; }; // cnc nets
acl "slave" { 192.168.1.0/24 ; localhost ; }; // slvae dns server
acl "trusted" {10.0.0.0/8; 192.168.0.0/16;};  //内网

logging {
        channel default_syslog { syslog local2; severity error; };
        channel audit_log { file "/var/log/named.log"; severity error; print-time yes; };
        category default { default_syslog; };
        category general { default_syslog; };
        category security { audit_log; default_syslog; };
        category config { default_syslog; };
        category resolver { audit_log; };
        category xfer-in { audit_log; };
        category xfer-out { audit_log; };
        category notify { audit_log; };
        category client { audit_log; };
        category network { audit_log; };
        category update { audit_log; };
        category queries { audit_log; };
        category lame-servers { audit_log; };
        };

options {
        directory "/var/named";
        pid-file "/var/named/named.pid";
        statistics-file "/var/named/named.stats";
        // memstatistics-file "/var/named/named.memstats";
        dump-file "/var/adm/named.dump";
        zone-statistics yes;
        auth-nxdomain yes;
        // check-names master warn;
        notify yes;
        transfer-format many-answers;
        max-transfer-time-in 60;
        interface-interval 0;
        allow-transfer { slave; };
        // allow-query { trusted; };
        blackhole { bogon; };
        };

view "cnc" in {
        match-clients { cnc; };
        recursion no;
       
zone "." {type hint; file "named.root";};
zone "0.0.127.in-addr.arpa" {type master; file "localhost.rev";};
zone "**.***.211.in-addr.arpa" {type master; file "gov.cnc.rev";}; TAG标签 : 位置 放在 category audit_log file type zone master