It would be nice if we could add the line allow-notify: 127.0.0.1 NOKEY to the server: section instead of in each zone: section. Especially, since it is a requirement for nsdc update. Or even make it implicit to always allow this from localhost (f you can't trust localhost, you have more problems) Paul