Do you want to disable axfrs at all or just disallow it for unknown dns-servers? If you want to do the last one, why don't you use ACLs (http://www.isc.org/index.pl?/sw/bind/)