Practices (9)

Separate authoritative/caching
configure an authoritative-only server
configure a caching-only server
restricting query source to your subnet
Set up chroot/setuid environments
under "/var/chroot/named"
make sure that everything works
does rndc work?
how about rndc dumpdb / stat?
are log files updated?