9.7.0-P1 managed-keys.bind issues

[Evan Hunt]

> It would appear that these are all related. Allowing outbound DNS
> queries fixed these messages.

Thanks for the report.

If you didn't want to allow outbound DNS queries, then just turn off
dnssec-lookaside.  What it's doing is trying to refresh the DNSSEC key
for dlv.isc.org, but if you weren't going to be supporting outbound
queries anyway, there's no need for it to do this.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.