Внутренний dns-сервер на шлюзе

root@localhost:/home/aleksa# dig stat.local

; <<>> DiG 9.9.4-RedHat-9.9.4-61.el7_5.1 <<>> stat.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58313
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;stat.local.                    IN      A

;; ANSWER SECTION:
stat.local.             148     IN      A       172.16.0.2
stat.local.             148     IN      A       172.16.11.1
stat.local.             148     IN      A       172.16.0.1
stat.local.             148     IN      A       172.16.0.4
stat.local.             148     IN      A       172.16.0.3

;; Query time: 0 msec
;; SERVER: 172.16.0.123#53(172.16.0.123)
;; WHEN: Ср окт 10 09:15:27 +05 2018
;; MSG SIZE  rcvd: 119

root@localhost:/home/aleksa# dig -x 172.16.0.123

; <<>> DiG 9.9.4-RedHat-9.9.4-61.el7_5.1 <<>> -x 172.16.0.123
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49212
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;123.0.16.172.in-addr.arpa.     IN      PTR

;; ANSWER SECTION:
123.0.16.172.in-addr.arpa. 1200 IN      PTR     cssrv01.stat.local.

;; Query time: 1 msec
;; SERVER: 172.16.0.123#53(172.16.0.123)
;; WHEN: Ср окт 10 09:24:55 +05 2018
;; MSG SIZE  rcvd: 86

root@localhost:/home/aleksa# dig stat.local mx

; <<>> DiG 9.9.4-RedHat-9.9.4-61.el7_5.1 <<>> stat.local mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24336
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;stat.local.                    IN      MX

;; AUTHORITY SECTION:
stat.local.             3600    IN      SOA     dcsrv01.stat.local. hostmaster.stat.local. 50728 900 600 86400 3600

;; Query time: 1 msec
;; SERVER: 172.16.0.123#53(172.16.0.123)
;; WHEN: Ср окт 10 09:25:45 +05 2018
;; MSG SIZE  rcvd: 94

root@localhost:/home/aleksa# dig stat.local NS +noall +answer

; <<>> DiG 9.9.4-RedHat-9.9.4-61.el7_5.1 <<>> stat.local NS +noall +answer
;; global options: +cmd
stat.local.             3147    IN      NS      dcsrv02.stat.local.
stat.local.             3147    IN      NS      dcsrv03.stat.local.
stat.local.             3147    IN      NS      dcsrv01.stat.local.

options {
        listen-on port 53 { 127.0.0.1; 172.16.0.70; };
        listen-on-v6 port 53 { ::1; };
        version         "unknown";
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost; 172.16.0.0/12; };
        
        recursion no;

        dnssec-enable yes;
        dnssec-validation yes;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

zone "localhost.localdomain" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "1.0.0.127.in-addr.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.empty";
        allow-update { none; };
};

zone "stat.local" {
type master;
file "data/stat.local";
allow-transfer { 127.0.0.1; 172.16.0.70; };
};

$TTL 3600
stat.local.                IN      SOA       dcsrv01.stat.local. root.stat.local. (
                           2018101001
                           900
                           600
                           86400
                           3600 )

;;; NS ;;;
stat.local.                   IN      NS     dcsrv01.stat.local.
stat.local.                   IN      NS     dcsrv02.stat.local.
stat.local.                   IN      NS     dcsrv03.stat.local.

;;; A ;;;
stat.local.                   IN      A      172.16.0.1
stat.local.                   IN      A      172.16.0.2
stat.local.                   IN      A      172.16.0.3
stat.local.                   IN      A      172.16.0.4
stat.local.                   IN      A      172.16.11.1