Can I use allow-query in a forward zone?
> Can you place an allow-query statement on a zone forward statement like below:
>
> zone "int.brad.com" {
> type forward;
> forwarders { 163.231.100.1; 163.231.101.1; };
> allow-query { "int-net" };
> };
>
> We have a need to do this with a DNS scheme we are going to implement.
No, but you can use views to restrict who can use the forwarders.
cricket