this is common configuration on authoritative name servers:

allow-query { none; }

will disable query for all zones and then you enable the queries for specific zones. this allows truly autoritative, non-recursive bind nameserver

Closes: #366409

use hook_provision_init() in the provision_dns.module to initialise defines

Closes: #366345

Fix issue in DNS server, where packages disappear. The $data context array was being cleared during verify, which broke everything else