Secure DNS Server

I have internal dns server. I need to implement security from external threats and queries; the dns server is up and running, so this should be very quickly for someone who knows what he is doing. For example, when hosts are queried from internet dns server is not supposed to return its private ip addresses, etc. DNS is running Bind(named) on CentOS 5.