bind axfr refused but still allows ixfr?

[Troubled User]

Using bind 9

I set   allow-transfer { none; }

It seems to refuse an AXFR request,  but still allows IXFR..  how do i disable this.


$ dig @localhost AXFR domain.tld

; <<>> DiG 9.2.4 <<>> @localhost AXFR domain.tld
;; global options:  printcmd
; Transfer failed.



$ dig @localhost IXFR domain.tld
;; Warning, ixfr requires a serial number

; <<>> DiG 9.2.4 <<>> @localhost IXFR domain.tld
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22975
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;domain.tld.                    IN      A

;; AUTHORITY SECTION:
.                       10800   IN      SOA     A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2006040700 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 127.0.0.1#53(localhost)
;; WHEN: Fri Apr  7 21:45:06 2006
;; MSG SIZE  rcvd: 103