update change log and example.toml for axfr setting

CHANGELOG.md

@@ -17,6 +17,7 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 - *breaking* `ClientFuture` after construction, now returns a "background" `ClientFuture` and a "foreground" `BasicClientHandle`
 - *breaking* `Client` has more type parameters, these match with the same types returned by the `*ClientConnection` constructors
 - *breaking* all default features, removed: "dns-over-openssl", "dnssec-openssl". Use --features=dns-over-openssl,dnssec-openssl to enable
+- *breaking* `named` configuration now has AXFR disabled by default.
 - feature `tls` renamed to `dns-over-openssl`
 - upgraded `native-tls` and `tokio-tls` to 0.2
 

server/tests/named_test_configs/example.toml

@@ -80,6 +80,9 @@ file = "example.com.zone"
 ## if false, updates will not be allowed, default false
 # allow_update = false
 
+## if false, AXFRs requests will result in Refused responses
+# allow_axfr = false
+
 ## if true, looks to see if a chained pem file exists at $file.pem (see
 ## supported_algorithms below).
 ## these keys will also be registered as authorities for update,