If I set allow-query { 127.0.0.1; [myipblock]; } Then my DNS doesn't respond to any other servers, right? This would be bad for being authoritative. so, should I set that and then set allow-query { any; }; in each zone? Is that better than simply setting the IPs that are allowed recursion?