DNS config

[kilburn]

AFAIK the secondary DNS setting is only used to generate bind's zone files. This is, for each client domain "domain.tld", the panel adds an NS record "ns2.domain.tld" pointing to this IP, and nothing else.

Therefore, AXFR-enabled clients must be manually configured in /etc/bind/named.conf.options, with an "allow-transfer" directive (where you can put a whole subnet, just check the syntax in bind's docs).