Aha. I added allow-transfer with the list of slaves, restarted bind and got:
 client 85.119.84.35#60393 (keiths-place.co.uk): bad zone transfer request: 'keiths-place.co.uk/IN': non-authoritative zone (NOTAUTH)
Jul 23 22:22:25 westnorfolk named[27705]: client 85.119.80.222#60026 (keiths-place.co.uk): bad zone transfer request: 'keiths-place.co.uk/IN': non-authoritative zone (NOTAUTH)
Jul 23 22:22:26 westnorfolk named[21796]: client 85.119.80.198#2567 (keiths-place.co.uk): query 'keiths-place.co.uk/SOA/IN' denied
Jul 23 22:22:26 westnorfolk named[27705]: client 85.119.80.198#40861 (keiths-place.co.uk): bad zone transfer request: 'keiths-place.co.uk/IN': non-authoritative zone (NOTAUTH)


On Tue, 23 Jul 2019 at 22:16, Anthony Newman via users <users@lists.bitfolk.com> wrote:

On 2019-07-23 14:06, Keith Williams wrote:
>
>
> Following "solutions" on Google, I checked all permissions, checked
> apparmor (no file for bind there) added all possible slaves to
> allow-query, checked firewalls. And read all I could find on Bind.
> Though I have been running the 2 bind servers for years and they
> always just seemed to work.
> Sorry, should have said, running Bind 9.11
>
>
I don't see an allow-transfer in there.

_______________________________________________
users mailing list
users@lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/users