diff --git a/src/knot/server/name-server.c b/src/knot/server/name-server.c
index ca366d43461a505141a7c4543c31f4012b7acd41..c9ca63ca7e4c0db3f9fbceb6484201116e9b593a 100644
--- a/src/knot/server/name-server.c
+++ b/src/knot/server/name-server.c
@@ -2004,16 +2004,16 @@ DEBUG_NS(
 	free(name_str2);
 );
 	// Check xfr-out ACL
-	char *nstr = dnslib_dname_to_str(qname);
 	if (acl_match(zone->acl.xfr_out, &xfr->from) == ACL_DENY) {
 		/*! \todo What should we return here? */
+		debug_ns("Request for AXFR OUT is not authorized.\n");
 		dnslib_response_set_rcode(xfr->response, DNSLIB_RCODE_NOTAUTH);
 		return KNOT_EOK;
 	} else {
-		fprintf(stderr, "xfr request is authorized for zone %s\n",
-			nstr);
+		debug_ns("Authorized AXFR OUT request.\n");
 	}
 
+
 	return ns_axfr_from_zone(zone, xfr);
 }