DNS authoritative server and private domain?

15 msg	SPF on 9.4.1 now?
2 msg	bind-workers list doesn't exists?
4 msg	rootserver info
3 msg	Information about libraries versions
4 msg	'host' Return Codes
3 msg	Secondary Server not answerig authoritative for...
14 msg	Strange problem
2 msg	dual internal/external chrooted bind w/third se...

DNS authoritative server and private domain?
\ Ricardo Martinez (17 May 2007)
. \ Barry Margolin (18 May 2007)

2 msg	rndc: 'reload' failed: out of memory
1 msg	dnscap -x, openbsd port, see <http://public....
11 msg	resolv.conf option for nameserver with specific...
2 msg	'dnscap -x' anybody?
8 msg	bind9 is taking little Breaks for Some Reason.
6 msg	resolve.conf
2 msg	re: last call on dnscap
8 msg	4 DNS servers, 1 BIND9 slave, 2 BIND8.4 slaves,...
3 msg	logging 'successes'
2 msg	reverse lookup entry in BIND configuration
5 msg	resolve external and internal Domains.

Subject:	DNS authoritative server and private domain?
Group:	Bind-users
From:	Ricardo Martinez
Date:	17 May 2007

Hello List.
I'm a little bit confused about how to build my named.conf configuration. What i want to do is to have a primary server and a secondary server with TSIG.
I'm authorative for several domains...in particular i want that one of those domains be accesible only by my internal network. What i'm doing now is use view.. but i'm not so sure if this is the correct configuration. Can someone help me here or give some advice?. This is my configuration ...
.........

options {

directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
zone-statistics yes;
notify no;
transfer-format many-answers;

.
max-transfer-time-in 60;

interface-interval 0;

allow-transfer {
key mykey;
};

allow-query {
trusted;
};

.....

view "internal-in" in {

match-clients { trusted; };
recursion yes;
additional-from-auth yes;
additional-from-cache yes;

zone "." in {
type hint;
file "root.hints";
};

zone "0.0.127.in-addr.arpa" in {
type master;
file "db.127.0.0";

allow-query {
any;
};

allow-transfer {
none;
};
};

zone "my.internal.domain.only" in {
type master;
file "db.my.internal.domain.only";
};

zone "my.authoritative.domain1." in {
type master;
file "db.my.authoritative.domain1";
allow-query {
any;
};
};

zone "my.authoritative.domain2." in {
type master;
file "db.my.authoritative.domain2";
allow-query {
any;
};
};

view "external-in" in {

match-clients { any; };
recursion no;
additional-from-auth no;
additional-from-cache no;

zone "." in {
type hint;
file "root.hints";
};

zone "my.authoritative.domain1." in {
type master;
file "db.my.authoritative.domain1";
allow-query {
any;
};
};

zone "my.authoritative.domain2." in {
type master;
file "db.my.authoritative.domain2";
allow-query {
any;
};
};

Is this ok? or there is another way to do this?

Thanks

Ricardo.-