Move firewall script to roles. Adjust hosts. ..

roles/common/templates/etc/bind/named.conf.options.j2

@@ -33,6 +33,13 @@ options {
    //========================================================================
    dnssec-validation auto;
 
+   // version statement - inhibited for security
+   // (avoids hacking any known weaknesses)
+   version "not currently available";
+
+   // disables all zone transfer requests
+   allow-transfer{"none";};
+
    // caching name services
    recursion yes;