<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>> META_TYPE = 'ALLOW-AXFR-FROM'<br><div>> META_IND = order number (used for ordering)<br>> META_CONTENT = 'netmask'<br>> <br>> you can have multiple ALLOW-AXFR-FROM keys for multiple networks. <br><br>Just to report back: works as written above. Introduced in commit<br>https://github.com/PowerDNS/pdns/commit/c574336<br><br>Apparently the semantics did change, under "Other Changes", between pdns_server 3.3.1 and 3.4.0-RC1:<br>"The AXFR ACL (allow-axfr-ips) now defaults to 127.0.0.0/8,::1 instead of the whole world."<br><br>Since I went straight from 3.1 to 3.4.6, my legs got blown off by this land mine.<br>The lesson I learned here is to carefully read through each and every change before upgrading.<br><br>Some time ago, I remember solicitations for new features in 4.#. My suggestion after this experience<br>would be to start considering forward and backward compatibility, in such a way that new features do not<br>break existing semantics.<br></div> </div></body>
</html>