DHCP, BIND9 - dynamic dns update

Hello all,

can someone help me with the problem stated in subject? even if i think that
all required configuration steps were performed i'm still unable to update
my dns database.

### /chroot/dns/etc/bind/named.con ###
options {
directory "/var/bind";
auth-nxdomain yes;
};

key "rndc-key" {
algorithm hmac-md5;
secret "...";
};

controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};

zone "chaos.it" {
type master;
file "chaos.it";
allow-update { key rndc-key; };
};

zone "254.168.192.in-addr.arpa" {
type master;
file "254.168.192.in-addr.arpa";
allow-update { key rndc-key; };
};

[cut]

logging {
channel update_debug {
file "/var/log/update-debug.log";
severity debug 3;
print-category yes;
print-severity yes;
print-time yes;
};

channel security_info {
file "/var/log/named-auth.info";
severity info;
print-category yes;
print-severity yes;
print-time yes;
};

category update { update_debug; };
category security { security_info; };
};
### EOF ###

### /chroot/dns/var/bind/chaos.it ###
$TTL 3D
@ IN SOA ns.chaos.it. askar.chaos.it. (
1
8H
2H
4W
1D)
NS ns.chaos.it.
ns A 192.168.254.3
### EOF ###

### /chroot/dns/var/bind/254.168.192.in-addr.arpa ###
$TTL 3D
@ IN SOA ns.chaos.it. askar.chaos.it. (
1
8H
2H
4W
1D)
NS ns.chaos.it.
3 PTR ns.chaos.it.
### EOF ###

and when i start daemon no error is reported

Jan 22 01:54:47 [named] starting BIND 9.2.2-P1 -u named -n 1 -t /chroot/dns
Jan 22 01:54:47 [named] using 1 CPU
Jan 22 01:54:47 [named] loading configuration from '/etc/bind/named.conf'
Jan 22 01:54:47 [named] no IPv6 interfaces found
Jan 22 01:54:47 [named] listening on IPv4 interface lo, 127.0.0.1#53
Jan 22 01:54:47 [named] listening on IPv4 interface eth0, 192.168.254.3#53
Jan 22 01:54:47 [named] command channel listening on 127.0.0.1#953
Jan 22 01:54:47 [named] zone 0.0.127.in-addr.arpa/IN: loaded serial 1
Jan 22 01:54:47 [named] zone 254.168.192.in-addr.arpa/IN: loaded serial 1
Jan 22 01:54:47 [named] zone chaos.it/IN: loaded serial 1
Jan 22 01:54:47 [named] zone localdomain/IN: loaded serial 1
Jan 22 01:54:47 [named] running

and below follows the configuration file of dhcp

### /chroot/dhcp/etc/dhcp/dhcpd.conf ###
default-lease-time 600;
max-lease-time 7200;

authoritative;

ddns-updates on;
ddns-domainname "chaos.it";
ddns-rev-domainname "in-addr.arpa";
ddns-update-style interim;

subnet 192.168.254.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.254.255;
option domain-name-servers 192.168.254.3;
option domain-name "chaos.it";

key "rndc-key" {
algorithm hmac-md5;
secret "...";
}

; zone chaos.it. {
key rndc-key;
primary 127.0.0.1;
}

zone 254.168.192.in-addr.arpa. {
key rndc-key;
primary 127.0.0.1;
}

range 192.168.254.65 192.168.254.126;

host nyx.chaos.it {
hardware ethernet 00:e0:18:2c:23:27;
fixed-address 192.168.254.2;
}
}
### EOF ###

and this is log for start dhcp

Jan 22 11:03:55 [dhcpd] Wrote 0 deleted host decls to leases file.
Jan 22 11:03:55 [dhcpd] Wrote 0 new dynamic host decls to leases file.
Jan 22 11:03:56 [dhcpd] Wrote 1 leases to leases file.

but when from the client i still have

# dhcpcd eth0 -h nyx.chaos.it
# dig nyx.chaos.it
; <<>> DiG 9.2.3 <<>> nyx.chaos.it
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31672
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;nyx.chaos.it. IN A

;; AUTHORITY SECTION:
chaos.it. 86400 IN SOA ns.chaos.it.
askar.chaos.it. 1 28800 7200 2419200 86400

;; Query time: 32 msec
;; SERVER: 192.168.254.3#53(192.168.254.3)
;; WHEN: Sat Jan 22 11:23:13 2005
;; MSG SIZE rcvd: 75

and no answer section... the fact is that log files of bind neither report
any kind of auth error nor try by the dhcpd of updating anything - so maybe
the problem is somewhere in dhcpd configuration?
--
Hekaton Keires,
En to phronein maedhen aedistos bios.