DNS Security

[wwebb at adni.net]

Bill> If so, then what is the purpose of the
>     Bill> "allow-query { any; } entry above?
> 
> This entry means that there'a an ACL of "any" for the 
acmebw.com
> zone. Anybody anywhere can send the name server queries for names
> in that zone, which is how things generally should be. The
> zone-specific ACL is applied instead of the global one.... 

Aside from the master zone stateements, is it necessary to have 
"allow-query { any; } in the slave zone statements to overcome the 
global one  ?