Security DNS

I have an external DNS with Windows 2000. How do I do to allow recursive querys of specific networks or only allow querys of specific zone (e.g. internal zone) and don’t response for other not owner zones?