Re: on to letsencrypt

[Tim]

On Sat, 2021-05-01 at 12:04 +0800, Ed Greshko wrote:
> You are missing the fact that you attempting to run a *public* DNS
> server.
>
> That means that your DNS server must accept queries from *any* source
> address.
>
> allow-query     { any; };
>
> is what you'll need.

Supplemental info:  You allow all queries, but you only provide answers
for your own domain.