Does named 8.x defaultly refuse zone transfers for its slave zones, or should allow-transfer be used to restrict transfers to trusted ip's? Len