strange log

[Joseph Begumisa]

> Do anybody know what these mean?
> thanx.
>
> Jan 16 11:49:52 NS_SERVER named[29679]: denied AXFR from [IP_ADDRESS].1967
> for "domain.it" (acl)

you have an access control list (acl) set specifying who can do a zone
transfer of  domain.it and someone else not in your access control list is
trying to transfer that zone. refer to the allow-transfer option which
uses address match lists in this way.

> Jan 16 11:49:53 NS_SERVER named[29679]: denied update from
> [IP_ADDRESS].64412 for "domain.it"

that machine with that ip address is trying to update your zone file for
domain.it. refer to the allow-update option which also makes use of
address match lists.

Joseph.