8f9ca5e1c4
Permit AXFR from shared internal networks and cross-site egress addresses while retaining loopback and the existing secondary.