diff --git a/CHANGES b/CHANGES
index 3d7c82f2ac..352713dc28 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+1670.	[func]		Log UPDATE requests to slave zones without an acl as
+			"disabled" at debug level 3. [RT# 11657]
+
 1668.	[bug]		DIG_SIGCHASE was making bin/dig/host dump core.
 
 1667.	[port]		linux: not all versions have IF_NAMESIZE.
diff --git a/bin/named/update.c b/bin/named/update.c
index 053943dd0d..c16fff6174 100644
--- a/bin/named/update.c
+++ b/bin/named/update.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: update.c,v 1.109.18.4 2004/06/04 03:45:45 marka Exp $ */
+/* $Id: update.c,v 1.109.18.5 2004/06/21 00:42:36 marka Exp $ */
 
 #include <config.h>
 
@@ -247,9 +247,12 @@ checkupdateacl(ns_client_t *client, dns_acl_t *acl, const char *message,
 	const char *msg = "denied";
 	isc_result_t result;
 
-	if (slave && acl == NULL)
-		return (DNS_R_NOTIMP);
-	result = ns_client_checkaclsilent(client, acl, ISC_FALSE);
+	if (slave && acl == NULL) {
+		result = DNS_R_NOTIMP;
+		level = ISC_LOG_DEBUG(3);
+		msg = "disabled";
+	} else
+		result = ns_client_checkaclsilent(client, acl, ISC_FALSE);
 
 	if (result == ISC_R_SUCCESS) {
 		level = ISC_LOG_DEBUG(3);