Update RPZ zone records

[Anvar Kuchkartaev]

Hello,

I am trying to update RPZ zone records dynamically using nsupdate. But 
unfortunately I am facing with NOTZONE option.

nsupdate -k /etc/rndc.key < nsupdate.txt

Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; ZONE SECTION:
;rpz.                IN    SOA

;; UPDATE SECTION:
32.213.60.86.188.rpz-client-ip.    60 IN    CNAME rpz-passtrhu.

update failed: NOTZONE


nsupdate.txt:

server localhost
zone rpz
update add 32.213.60.86.188.rpz-client-ip.        60    CNAME rpz-passtrhu.
show
send


my rpz zone:

zone "rpz" IN {
     type master;
     file "named.rpz";
     allow-query { localhost; };
     update-policy {
                 grant rndc-key zonesub ANY;
         };
};

Any help will be greatly appreciated,

-- 
Anvar Kuchkartaev
anvar at aegisnet.eu