Я хотел бы для всех выложить свои конфиги

iptables
/etc/network/if-up./ в эту папку сбрасываем конфиг и делаем его исполняемым
#!/bin/sh
#INET_IP="192.168.11.3"
#INET_IFACE="eth1"
#INET_BROADCAST="192.168.11.255"
#LAN_IP="192.168.12.1"
#LAN_IP_RANGE="192.168.12.0/24"
#LAN_IFACE="eth0"
#LO_IFACE="lo"
#LO_IP="127.0.0.1"
IPTABLES=/sbin/iptables
#$IPTABLES *filter
$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD DROP
$IPTABLES -P OUTPUT ACCEPT
#$IPTABLES -P PREROUTING ACCEPT
/sbin/modprobe ip_conntrack_ftp
/sbin/modprobe ip_conntrack_irc
/sbin/modprobe ip_nat_ftp
/sbin/modprobe ip_nat_irc
#modprobe iptable_filter
#modprobe ip_queue
#$IPTABLES -A INPUT -p tcp -m multiport --port xxx,xxx,xxx
#$IPTABLES -A OUTPUT -p icmp -j QUEUE
#$IPTABLES -A FORWARD -m iprange --src-range 192.168.xxx.xxx-192.168.xx.xx -j DROP
#$IPTABLES -A FORWARD -m iprange --src-range 192.168.xx.xx-192.168.xx.xx -j DROP
#$IPTABLES -A FORWARD -m iprange --src-range 192.168.11.134-192.168.11.136 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.5 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.106 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.64 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.84 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.227 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.122 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.157 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.159 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.171 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.217 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.160 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 88.212.205.75 -j DROP
#$IPTABLES -A FORWARD -s 212.58.251.197 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.44 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 192.168.11.206 -j DROP
#$IPTABLES -A FORWARD -s 88.212.205.242 -j DROP
#$IPTABLES -A OUTPUT --dst 93.186.224.236 -j DROP
#$IPTABLES -A OUTPUT --dst 195.68.160.7 -j DROP
$IPTABLES -A FORWARD -m string --string http://vkontakte.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://vkontakte.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.pornoreka.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.pornoreka.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.bbc.co.uk --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.bbc.co.uk --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string content.video.mail.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string content.video.mail.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string lolikon.info --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string lolikon.info --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string video.rfn.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string video.rfn.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string dl.24video.net --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string dl.24video.net --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string moskva.fm --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string moskva.fm --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string dl.zaycev.net --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string dl.zaycev.net --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string broadcast02.station.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string broadcast02.station.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string nude-moon.narod.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string nude-moon.narod.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://444.gt3.vkadre.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://444.gt3.vkadre.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://irc.lv --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://irc.lv --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://4x4video.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://4x4video.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://hentai.if-art.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://hentai.if-art.com --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://yaplakal.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://yaplakal.com --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://moevideo.net --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://moevideo.net --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://videos50moviesand.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://videos50moviesand.com --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://video-4.7.rutube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://video-4.7.rutube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string www.rutube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string www.rutube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://video-2.10.rutube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://video-2.10.rutube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://video.xuk.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://video.xuk.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://phishka.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://phishka.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.prikol.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.prikol.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.fishka-spb.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.fishka-spb.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.youtube.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.youtube.com --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://video.privet.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://video.privet.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.golyeismeshnye.ru/ --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.golyeismeshnye.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.video-clips.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.video-clips.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.musictube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.musictube.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.muzvideo.com/ --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.muzvideo.com --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://otriva.net --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://otriva.net --algo kmp --to 65535 -j DROP
#$IPTABLES -A FORWARD -m string --string http://www.narod.tv --algo kmp --to 65535 -j DR##OP
#$IPTABLES -A INPUT -m string --string http://www.narod.tv/ --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.dailymotion.com/ru --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.dailymotion.com/ru --algo kmp --to 65535 -j DROP
#-A FORWARD -m string --string http://video.yandex.ru --algo kmp --to 65535 -j DROP
#$IPTABLES -A INPUT -m string --string http://video.yandex.ru --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.vbox7.com/ --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.vbox7.com/ --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.pornhub.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.pornhub.com --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://www.youngpornmovies.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://www.youngpornmovies.com --algo kmp --to 65535 -j DROP
$IPTABLES -A FORWARD -m string --string http://youporn.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -m string --string http://youporn.com --algo kmp --to 65535 -j DROP
$IPTABLES -A INPUT -p tcp -s 192.168.11.3 --dport 3306 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 192.168.11.8 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 192.168.11.61 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 192.168.11.6 --dport 3000 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 192.168.11.56 --dport 3000 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 8080 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 111 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 20001 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 10000 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 3899 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 3306 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 23 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 21 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 4899 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 7307 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 3307 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 20 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPT
# Задаем список тех кому можно подцепляться
#$IPTABLES -N allowed_root
#$IPTABLES -N allowed_mihail
#$IPTABLES -A allowed_root -s ip_192.168.11.8 -j ACCEPT
#$IPTABLES -A allowed_mihail -s ip_192.168.11.8 -j ACCEPT
#$IPTABLES -A INPUT -p tcp -i 192.168.11.8 --dport 22 -j allowed_root
#$IPTABLES -A INPUT -p tcp -i 192.168.11.8 --dport 22 -j allowed_mihail
#$IPTABLES -A INPUT -p tcp --dport 1024 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 80 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 5190 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 31337 -m state --state NEW -j DROP
$IPTABLES -A INPUT -p tcp --dport 1723 -m state --state NEW -j ACCEPT
#$IPTABLES -A INPUT -p tcp --dport 445 -m state --state NEW -j ACCEPT
#$IPTABLES -A INPUT -p tcp --dport 139 -m state --state NEW -j ACCEPT
#$IPTABLES -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -j ACCEPT
#$IPTABLES -A INPUT -p tcp --dport 139 -m state --state NEW -j ACCEPT
#$IPTABLES -A INPUT -p udp --dport 445 -m state --state NEW -j ACCEPT
# Разрешаем простокл gre
#$IPTABLES -A INPUT -p gre -j ACCEPT
#Разрешаем pptp server
#$IPTABLES -A INPUT -m tcp -p tcp --dport 1723 -j ACCEPT
#$IPTABLES -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 53 -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -p udp --dport 53 -j ACCEPT
$IPTABLES -A INPUT -p udp --dport 111 -j ACCEPT
$IPTABLES -A INPUT -p udp --dport 3307 -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 23 -j ACCEPT
$IPTABLES -A INPUT -p udp --dport 87 -j ACCEPT
$IPTABLES -A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 10/sec -j ACCEPT
$IPTABLES -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
#Для тэстирования NetAMS раскомментировать
#$IPTABLES -P FORWARD DROP
#$IPTABLES -A FORWARD -j QUEUE
#Разрешаем авторизацию в NetAMS
$IPTABLES -A INPUT -p tcp --dport 80 -j ACCEPT
#$IPTABLES -A FORWARD -j ULOG
$IPTABLES -A FORWARD -p tcp --dport 23 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p udp --dport 53 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p udp --dport 111 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p udp --dport 87 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p udp --dport 3307 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p udp --dport 23 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 28027 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 25 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 3306 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 110 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 143 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 443 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 3389 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 5190 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 21 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 20 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 80 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 22 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 23 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 20001 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 3307 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp --dport 1024 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 8080 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp --dport 6969 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp --dport 411 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 111 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp -s 192.168.12.8 --dport 23 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp -s 192.168.11.61 --dport 80 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp -s 192.168.11.222 --dport 1024 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp -s 192.168.11.223 --dport 1024 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp -s 192.168.11.224 --dport 1024 -m state --state NEW -j ACCEPT
#$IPTABLES -A FORWARD -p tcp --dport 8291 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p icmp -m icmp --icmp-type 8 -m limit --limit 10/sec -j ACCEPT
$IPTABLES -A FORWARD -p icmp -m icmp --icmp-type 0 -m limit --limit 10/sec -j ACCEPT
$IPTABLES -A FORWARD -p icmp -m icmp --icmp-type 3 -m limit --limit 10/sec -j ACCEPT
$IPTABLES -A FORWARD -p icmp -m icmp --icmp-type 4 -m limit --limit 10/sec -j ACCEPT
$IPTABLES -A FORWARD -p icmp -m icmp --icmp-type 11 -m limit --limit 10/sec -j ACCEPT
$IPTABLES -A FORWARD -p icmp -m icmp --icmp-type 12 -m limit --limit 10/sec -j ACCEPT
$IPTABLES -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
$IPTABLES -A FORWARD -p tcp -m state --state NEW -m tcp ! --tcp-flags SYN,RST,ACK SYN -j DROP
$IPTABLES -t mangle -A PREROUTING -i eth0 -j TTL --ttl-set 64
#$IPTABLES -A INPUT -p tcp -m tos --tos 0x16
#$IPTABLES -A OUTPUT -m ttl --ttl 60
#$IPTABLES -t nat -A POSTROUTING -p tcp -o eth0 -j SNAT --to-source 192.168.12.1-192.168.12.254:1-32000
#$IPTABLES -A PREROUTING -p tcp -d 192.168.11.1 -m tcp --dport 80 -j REDIRECT --to-port 3000
$IPTABLES -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080
#$IPTABLES -t nat -A PREROUTING -s 192.168.11.3/24 -i eth0 -p tcp -m multiport --dport 80,8080 -j REDIRECT --to-ports 3128
#$IPTABLES -t nat -A PREROUTING -s 192.168.11.3/24 -d ! 192.168.12.1/16 -p tcp --dport 80 -j REDIRECT --to-port 3128
$IPTABLES -t nat -A POSTROUTING -s 192.168.1.0/16 -j MASQUERADE
echo "1" > /proc/sys/net/ipv4/ip_forward

http_port 127.0.0.1:8080
http_port 192.168.1.x:8080 transparent
visible_hostname gateway.my.flat
cache_mgr mixa333@yandex.ru
#httpd_accel_host virtual
#httpd_accel_port 8080
#httpd_accel_with_proxy on
#httpd_accel_uses_host_header on
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

# Example rule allowing access from your local networks. Adapt
# to list your (internal) IP networks from where browsing should
# be allowed
acl our_networks src 192.168.0.0/16
http_access allow our_networks
#http_access allow localhost

# And finally deny all other access to this proxy
#http_access deny all

dhcp3-server конфиг
закидывать в /etc/dhcp3 конфиг называть dhcpd.conf
server-identifier server;
ddns-updates on;
ddns-update-style interim;
ddns-domainname "shulhome.local";
ddns-rev-domainname "in-addr.arpa.";
ignore client-updates;

log-facility local7;

# This is the key so that DHCP can authenticate it's self to BIND9
include "/etc/bind/rndc.key";

# This is the communication zone
zone network.athome. {
primary 127.0.0.1;
key rndc-key;
}
# Normal DHCP stuff
option domain-name "shluzhome.local.";
option domain-name-servers 192.168.1.x ;
option ntp-servers 192.168.1.1;
option ip-forwarding off;
default-lease-time 600;
max-lease-time 7200;
authoritative;
log-facility local7;
subnet 192.168.0.0 netmask 255.255.0.0 {
range 192.168.1.x 192.168.1.xxx;
option broadcast-address 192.168.255.255;
option routers 192.168.x.x;

host home {
hardware ethernet 00:e0:4c:2c:19:b3;
fixed-address 192.168.x.x;
}
#host tochka wi-fi {
#hardware ethernet EO:CB:4E:57:16:4E;
#fixed-address 192.168.1.3;
#}


allow unknown-clients;
zone 168.192.in-addr.arpa. {
primary 192.168.1.x;
key "rndc-key";
}
zone localdomain. {
primary 192.168.1.x;
key "rndc-key";
}
}

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local

include "/etc/bind/named.conf.options";

// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

controls {
inet 127.0.0.1 allow {localhost; } keys { "rndc-key"; };
};
zone "localhost" {
type master;
file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};

include "/etc/bind/named.conf.local";


named.conf.local
//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "shluzhome.local" {
type master;
file "/etc/bind/db.shluzhome";
allow-update { key "rndc-key"; };
notify yes;
};
zone "168.192.in-addr.arpa" {
type master;
file "/etc/bind/db.192.168.1";
allow-update { key "rndc-key"; };
notify yes;
};
include "/etc/bind/rndc.key";

ключ к удалённому управление dns
rndc
key "rndc-key" {
algorithm hmac-md5;
secret "xxxxxxxxxxx";
};

как вы мне все надоели, ламеры...

Да, да я знаю, кроме Вас круче только вареные яйца. Хотя вопрос спорный wink