On 12/10/25 06:13, Benoît Panizzon wrote:
Of course, I could specify allow-transfer to explicitly allow the ip addresses of the secondaries for each zone.
Correct. allow-transfer now defaults to "none". https://kb.isc.org/docs/bind-920-changes#runtime-configuration https://downloads.isc.org/isc/bind9/cur/9.20/doc/arm/html/notes.html#id43 Always read the release notes. :-) -- Ben -- Any opinions expressed in this message are those of the author alone. All information is provided without warranty of any kind. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.

