> If you enable a TSIG key for a zone slaving from a particular master, > all subsequent transfers for any zone slaving from that master will > attempt to use that key (because the key is defined for the host of the > endpoint, not the zone being mirrored) i believe this to be incorrect. it is per-zone. randy