tunlr + bind

options {
    directory "/var/named";
    pid-file "/run/named/named.pid";

    // Uncomment these to enable IPv6 connections support
    // IPv4 will still work:
    //  listen-on-v6 { any; };
    // Add this for no IPv4:
    //  listen-on { none; };

    forwarders {
        192.168.1.1;
        8.8.8.8;
        8.8.4.4;

    };

    allow-transfer { none; };
    allow-update { none; };

    version none;
    hostname none;
    server-id none;
    auth-nxdomain no;
    dnssec-enable yes;
    dnssec-validation yes;
    dnssec-lookaside auto;

    listen-on port 53 { any; };
    allow-query     { trusted; };
    allow-recursion { trusted; };
    recursion yes;
};

acl "trusted" {
        any;
};

zone "pandora.com" {
    type forward;
    forward only;
    forwarders {
        107.170.15.247;
        77.88.8.8;
    };
};
zone "spotify.com" {
    type forward;
    forward only;
    forwarders {
        107.170.15.247;
        77.88.8.8;
    };
};
zone "rdio.com" {
    type forward;
    forward only;
    forwarders {
        107.170.15.247;
        77.88.8.8;
    };
};
zone "local" {
    type forward;
    forward only;
    forwarders {
        192.168.1.1;
    };
};