I will like my bind9 DNS server to only handle request that needs my-test-dns.com, and reject all others.
My settings:

acl LAN {
10.10.10.1;
};

options {
    directory "/var/cache/bind";
    allow-query {  LAN; }; 
    listen-on { 10.10.10.2;};
};

zone "my-test-dns.com" {
    type master;
    file "/etc/bind/my-test-dns.db";
};

And:

$TTL 2d
@ IN SOA my-test-dns.com. some.email.gmail.com. (
         3      ; Serial
         12h    ; Refresh
         20     ; Retry
         3w     ; Expire
         20 )   ; Negative Cache TTL
;
@ IN NS my-test-dns.com.;
@ IN A <someip>;
www IN A <someip>;
* IN A <someip>;   ; Wildcard A record

I tried to add

        allow-transfer {"none";};
        allow-recursion {"none";};
        recursion no;

But then every call is refused, even what is going to my-test-dns.com..

What setting should I add to make all calls refuse, except if they are asking for *.my-test-dns.com ?