controls {
	# to allow rndc from localhost
	inet 127.0.0.1 allow { 127.0.0.1; } keys { rndckey; };

	# to allow rndc from ethernet
	inet 172.16.25.100 allow {	127.0.0.1;	# localhost
					172.16.202.100;	# itchy
					172.16.202.101;	# scratchy, just in case
				} keys { rndckey; };
};

key "rndckey" {
	algorithm	"hmac-md5";
	secret		"/c0E+/rNmyR6dHleyeLzyWitI5XHITohKbOnek6/S2I=";
};