add check for named.conf restricting allow-query to localhost or 127.x.x.x