<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Aug 19, 2009, at 6:30 PM, Mark Andrews wrote:</div><blockquote type="cite"><div><blockquote type="cite"><font class="Apple-style-span" color="#000000"><br></font></blockquote><blockquote type="cite">Thanks. That worked, and I was quickly able to see what I was doing <br></blockquote><blockquote type="cite">wrong. My primary nameserver was matching an IP in one of the <br></blockquote><blockquote type="cite">views. So all the notifies were seen by slave as being in that one <br></blockquote><blockquote type="cite">view. IPs override keys.<br></blockquote><br>Acl matches are order sensitive. The !key is in the examples to prevent<br>the signed message matching the view and moving onto the next one.<br></div></blockquote></div><div><br></div>Ok, that makes even more sense. I was getting what appeared to be very non-deterministic behavior, but well, of course, once you know the rules it makes a lot of sense.<div><br></div><div><br></div><div>In my case with multiple views and multiple keys..</div><div><br></div><div>{ subnet A; key A;};</div><div>{ subnet B; key B;};</div><div>{subnet C; key C;};</div><div>{subnet D; key D}:</div><div><br></div><div>If the server was in subnet C, and used key A or B it would work fine, but just by coincidence. Key C would work too, once again, by coincidence...but key D...boom.</div><div><br></div><div>Anyways, it's working great now. Thanks to everyone who helped.</div><div><br><div> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Thanks,</div><div><br></div><div>Josh Paetzel</div><div><br></div><div><br></div></div></span><br class="Apple-interchange-newline"> </div><br></div></body></html>