Change wording to indicate may not XFR instead of cannot

When a client has no permission to AXFR a zone from a server, the following diagnostics are logged:

```
AXFR of domain 'example' denied: client IP 10.0.0.1 has no permission
AXFR of domain 'example' failed: 10.0.0.1 cannot request AXFR
```

I feel the word _cannot_ is incorrect and should be _may not_ to indicate permission.

diff --git a/pdns/tcpreceiver.cc b/pdns/tcpreceiver.cc
index 3e4c00e5967acdf8cc8a1a78cf75673c3f06d982..49d2b30d87a9726c322de868fabe21d2ccfc1f05 100644 (file)
--- a/pdns/tcpreceiver.cc
+++ b/pdns/tcpreceiver.cc
@@ -585,7 +585,7 @@ int TCPNameserver::doAXFR(const DNSName &target, shared_ptr<DNSPacket> q, int ou
     }
 
     if (!canDoAXFR(q)) {
-      L<<Logger::Error<<"AXFR of domain '"<<target<<"' failed: "<<q->getRemote()<<" cannot request AXFR"<<endl;
+      L<<Logger::Error<<"AXFR of domain '"<<target<<"' failed: "<<q->getRemote()<<" may not request AXFR"<<endl;
       outpacket->setRcode(RCode::NotAuth);
       sendPacket(outpacket,outsock);
       return 0;