Disable recursion (also disables forwarders) BIND secondaries Fail on load if bad zone data Enable round robin Enable netmask ...