Aha. I added allow-transfer with the list of slaves, restarted bind and got:
client 85.119.84.35#60393 (keiths-place.co.uk): bad zone transfer request:
'keiths-place.co.uk/IN': non-authoritative zone (NOTAUTH)
Jul 23 22:22:25 westnorfolk named[27705]: client 85.119.80.222#60026 (
keiths-place.co.uk): bad zone transfer request: 'keiths-place.co.uk/IN':
non-authoritative zone (NOTAUTH)
Jul 23 22:22:26 westnorfolk named[21796]: client 85.119.80.198#2567 (
keiths-place.co.uk): query 'keiths-place.co.uk/SOA/IN' denied
Jul 23 22:22:26 westnorfolk named[27705]: client 85.119.80.198#40861 (
keiths-place.co.uk): bad zone transfer request: 'keiths-place.co.uk/IN':
non-authoritative zone (NOTAUTH)
On Tue, 23 Jul 2019 at 22:16, Anthony Newman via users <
users@???> wrote:
>
> On 2019-07-23 14:06, Keith Williams wrote:
> >
> >
> > Following "solutions" on Google, I checked all permissions, checked
> > apparmor (no file for bind there) added all possible slaves to
> > allow-query, checked firewalls. And read all I could find on Bind.
> > Though I have been running the 2 bind servers for years and they
> > always just seemed to work.
> > Sorry, should have said, running Bind 9.11
> >
> >
> I don't see an allow-transfer in there.
>
> _______________________________________________
> users mailing list
> users@???
> https://lists.bitfolk.com/mailman/listinfo/users
>