Имею следующие файлы
==========dhcpd.conf==================================
ddns-update-style interim;

option classless-route code 249 = array of unsigned integer 8;

        authoritative;
        allow client-updates;
        ddns-updates on;
        ddns-domainname "lan.local";
        ddns-rev-domainname "in-addr.arpa";
        use-host-decl-names on;
        update-static-leases on;
        default-lease-time 1086400;
        max-lease-time 172800;
        key "rndc-key" {
                algorithm hmac-md5;
                secret "***********==";
                }
        zone lan.local. {
                primary 10.10.5.1;
                key "rndc-key";
                }
        zone 10.10.in-addr.arpa. {
                primary 10.10.5.1;
                key "rndc-key";
                }
subnet 10.10.4.0 netmask 255.255.254.0 {
        # default gateway
        option routers 10.10.5.1;
        option subnet-mask 255.255.254.0;
        option domain-name "lan.local";
        option domain-name-servers 10.10.5.1;
        range 10.10.5.249 10.10.5.249;
        range 10.10.4.30 10.10.4.250;

        host aphrodite {
                hardware ethernet 00:e0:4c:4c:22:72;
                fixed-address 10.10.5.141;
                }
}
======================================================

и конфиг днса

================named.conf============================
key "rndc-key" {
        algorithm hmac-md5;
        secret "*************==";
};

options {
        directory       "/etc/namedb";
        pid-file        "/var/run/named/pid";
        dump-file       "/var/dump/named_dump.db";
        statistics-file "/var/stats/named.stats";
        forwarders {
                127.0.0.1;
                xx.xx.xx.xx;
        };
zone "." { type hint; file "named.root"; };
// Private Use Networks (RFC 1918)
zone "10.in-addr.arpa"          { type master; file "master/empty.db"; };
zone "16.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "17.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "18.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "19.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "20.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "21.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "22.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "23.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "24.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "25.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "26.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "27.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "28.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "29.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "30.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "31.172.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "168.192.in-addr.arpa"     { type master; file "master/empty.db"; };

// Link-local/APIPA (RFCs 3330 and 3927)
zone "254.169.in-addr.arpa"     { type master; file "master/empty.db"; };

// TEST-NET for Documentation (RFC 3330)
zone "2.0.192.in-addr.arpa"     { type master; file "master/empty.db"; };

// Router Benchmark Testing (RFC 3330)
zone "18.198.in-addr.arpa"      { type master; file "master/empty.db"; };
zone "19.198.in-addr.arpa"      { type master; file "master/empty.db"; };

// IANA Reserved - Old Class E Space
zone "240.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "241.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "242.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "243.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "244.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "245.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "246.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "247.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "248.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "249.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "250.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "251.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "252.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "253.in-addr.arpa"         { type master; file "master/empty.db"; };
zone "254.in-addr.arpa"         { type master; file "master/empty.db"; };

zone "lan.local" {
        type master;
        file "master/lan.hosts";
        allow-update {key "rndc-key";};
};
zone "10.10.in-addr.arpa" {
        type master;
        file "master/lan.rev";
        allow-update {key "rndc-key";};

};
===============================================================

Собственно проблема:
При включенном обновлении зон, маска пользователю раздается 255.0.0.0 и не раздается шлюз по умолчанию - что неправильно. Как только убираю в dhcpd.conf обновление днс (ddns-updates off) то все клиенты получают нормалдьную маску 255.255.254.0 и шлюз по умолчанию.

Тыкните меня носом плз, где  рыться? :)
Спасибо