DDNS and Hidden Master == Brain-Damaged

[John Hascall]

Can somebody explain to me why on earth the DDNS code,
after looking up the SOA for the zone to be updated,
insists on checking the NS records for the zone to see
if the SOA.MNAME is listed there?

Comment taken from lib/bind/resolv/res_findzonecut.c :
 *      ultimately we want some server addresses, which are ideally the ones
 *      pertaining to the SOA.MNAME, but only if there is a matching NS RR.
 *      so the second phase (after we find an SOA) is to go looking for the
 *      NS RRset for that SOA's zone.

John
PS, allow-update-forwarding is not the answer.