Hi Benoît, > Isn't there a setting which automatically allows all NS in a zone to > perform a transfer? I think you might be confusing "allow-transfer" with "notify": https://bind9.readthedocs.io/en/latest/reference.html#namedconf-statement-notify -- Best regards, Michał Kępień