You're right about the masters syntax; sorry, I missed before that this
was a masters problem and not an ACL problem.
The masters statement began with bind 9.3, according to the Albitz/Liu
"DNS and Bind" book. The named.conf(5) manpage describes its syntax.
dn