diff --git a/dns/templates/zone.master.erb b/dns/templates/zone.master.erb
index e2d608e..7153c97 100644
--- a/dns/templates/zone.master.erb
+++ b/dns/templates/zone.master.erb
@@ -4,8 +4,9 @@ zone "<%= zone %>" {
     <% if not slaves.empty? -%>
         allow-transfer {
       <% slaves.each do |slave| -%>
-        <%= slave['ipaddr'] %>;
+        <%= slave %>;
       <% end -%>
   };
+  allow-update { none;};
     <% end -%>
 };
diff --git a/dns/templates/zone.slave.erb b/dns/templates/zone.slave.erb
index 99ea6b7..8e8356e 100644
--- a/dns/templates/zone.slave.erb
+++ b/dns/templates/zone.slave.erb
@@ -5,5 +5,6 @@ zone "<%= zone %>" {
         <% master.each do |m| -%>
         <%= m %>;
         <% end -%>
+        allow-transfer { none; };
         };
 };