diff --git a/doc/Changelog b/doc/Changelog
index 2b69fde83..70f8dd59e 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -5,6 +5,7 @@
 	  waiting result buffers.
 	- Fix for #4219: secondaries not updated after serial change, unbound
 	  falls back to AXFR after IXFR gives several timeout failures.
+	- Fix that auth zone after IXFR fallback tries the same master.
 
 21 January 2018: Wouter
 	- Fix tcp idle timeout test, for difference in the tcp reply code.
diff --git a/services/authzone.c b/services/authzone.c
index 8f74fe3eb..69163b981 100644
--- a/services/authzone.c
+++ b/services/authzone.c
@@ -5658,7 +5658,8 @@ auth_xfer_transfer_tcp_callback(struct comm_point* c, void* arg, int err,
 		auth_chunks_delete(xfr->task_transfer);
 		comm_point_delete(xfr->task_transfer->cp);
 		xfr->task_transfer->cp = NULL;
-		xfr_transfer_nextmaster(xfr);
+		if(gonextonfail)
+			xfr_transfer_nextmaster(xfr);
 		xfr_transfer_nexttarget_or_end(xfr, env);
 		return 0;
 	}