TSIG for securing zone transfers

[Thiago NA]

Hi,

I'am testing the feature TSIG in my bind and I have been some troubles.
I configured my server to only accept tranfer zone from it and configured
the server with a key, but it is accepting transfer zone with "nslookup's
ls".

my named.conf:
...

key test {
        algorithm hmac-md5;
        secret "abcdefgh";
};

the server x.y.z.w is itself.
server x.y.z.w {
        keys { leo_key; };
};

...

Thank you.

Thiago.