Add a way to not provide AXFR for everyone that doesn't really work

When I do this:

    u etc (hetzner-new=) $ sudo sh -x /etc/bin/iptables-conf.sh ; sudo /sbin/iptables -t nat -L -n -v
    + iptables -F
    + iptables -t nat -F
    + iptables -t nat -A POSTROUTING -s 10.9.8.0/24 -o eth0 -j MASQUERADE
    + ns1=ns1.first-ns.de.
    + ns2=robotns2.second-ns.de.
    + ns3=robotns3.second-ns.com.
    + nsdebug=140.211.15.157
    + iptables -A PREROUTING -t nat -p udp --source ns1.first-ns.de.,robotns2.second-ns.de.,robotns3.second-ns.com.,140.211.15.157 --destination 5.9.157.150 --dport 53 -j DNAT --to-destination 127.0.0.1:53
    + iptables -A PREROUTING -t nat -p udp --destination 5.9.157.150 --dport 53 -j REDIRECT --to-ports 5252
    Chain PREROUTING (policy ACCEPT 1 packets, 131 bytes)
     pkts bytes target     prot opt in     out     source               destination
         0     0 DNAT       udp  --  *      *       213.239.242.238      5.9.157.150          udp dpt:53 to:127.0.0.1:53
         0     0 DNAT       udp  --  *      *       213.133.105.6        5.9.157.150          udp dpt:53 to:127.0.0.1:53
         0     0 DNAT       udp  --  *      *       193.47.99.3          5.9.157.150          udp dpt:53 to:127.0.0.1:53
         0     0 DNAT       udp  --  *      *       140.211.15.157       5.9.157.150          udp dpt:53 to:127.0.0.1:53
         0     0 REDIRECT   udp  --  *      *       0.0.0.0/0            5.9.157.150          udp dpt:53 redir ports 5252

    Chain INPUT (policy ACCEPT 1 packets, 131 bytes)
     pkts bytes target     prot opt in     out     source               destination

    Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
     pkts bytes target     prot opt in     out     source               destination

    Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
     pkts bytes target     prot opt in     out     source               destination
         0     0 MASQUERADE  all  --  *      eth0    10.9.8.0/24          0.0.0.0/0

I just get this on my test host:

    $ dig +short @u.nix.is goosegoosego.com MX
    10 mail.goosegoosego.com.
    $ dig +short @u.nix.is goosegoosego.com AXFR
    ;; Connection to 5.9.157.150#53(5.9.157.150) for goosegoosego.com failed: connection refused.

I.e. for some reason I can MX but not AXFR, wtf, nothing in the pdns
log.
Partially revert "Add a way to not provide AXFR for everyone that doesn't really work"

This partially reverts commit d4b6500539ca0fcc9ee968eee5372d23e2a00cf1.

As noted in that commit message this doesn't really work, just fall
back on allowing everyone on the internet to AXFR us, not like these
files aren't in Git anyway...
Revert "Partially revert "Add a way to not provide AXFR for everyone that doesn't really work""

This reverts commit e408063b3cb032ce4da07acd5f783d9527b468c2.

This gets us back to what I was originally trying to do, The Fernando
pointed out that zone transfer uses TCP. No idea how this ever worked,
presumably because when I set this up at the time we were using 2x
IPs.