Missing denied AXFR from the logs
ondrej@trubka:~$ dig IN AXFR vesperumbris.cz @pagan.rfc1925.org
; <<>> DiG 9.9.4 <<>> IN AXFR vesperumbris.cz @pagan.rfc1925.org
;; global options: +cmd
; Transfer failed.
And nothing shows in the logs, as opposed to:
ondrej@trubka:~$ dig IN IXFR=0 vesperumbris.cz @pagan.rfc1925.org
; <<>> DiG 9.9.4 <<>> IN IXFR=0 vesperumbris.cz @pagan.rfc1925.org
;; global options: +cmd
; Transfer failed.
this correctly logs the error:
Jul 16 10:47:52 pagan.rfc1925.org knot[16184]: [error] Outgoing IXFR of 'vesperumbris.cz.' with '2001:1568:b:145::1@60116': Failed to start (Not allowed.).