Can we have allow-query in the global options as well as under the zone definitions? For example: We would like to restrict test1.com subdomain to test-acl options { allow-query { any; }; } zone test1.com { type master; file "test1.db"; allow-query { test-acl; }; }; } zone test2.com { type master; file "test2.db"; } Thanks Saravanan Subramani