diff --git a/sys/src/cmd/ndb/dnstcp.c b/sys/src/cmd/ndb/dnstcp.c
index 3db74e155..261852655 100644
--- a/sys/src/cmd/ndb/dnstcp.c
+++ b/sys/src/cmd/ndb/dnstcp.c
@@ -299,15 +299,15 @@ dnzone(DNSmsg *reqp, DNSmsg *repp, Request *req, uchar *srcip)
 
 	/* send the soa */
 	repp->an = rrlookup(dp, Tsoa, NOneg);
-	reply(1, repp, req);
-	if(repp->an == nil)
-		goto out;
-	if(!anyone && !myip(srcip) && findserver(srcip, repp->an->soa->slaves, req) == nil){
+	if(repp->an != nil && !anyone && !myip(srcip)
+	&& findserver(srcip, repp->an->soa->slaves, req) == nil){
 		dnslog("dnstcp: %I axfr %s - not a dnsslave", srcip, dp->name);
 		rrfreelist(repp->an);
 		repp->an = nil;
-		goto out;
 	}
+	reply(1, repp, req);
+	if(repp->an == nil)
+		goto out;
 	rrfreelist(repp->an);
 	repp->an = nil;