DHCP is provided by *dns1.pyrocufflink.blue* now, not the gateway. To allow dynamic DNS updates from it, the correct source address must be listed in the zone configuration for *pyrocufflink.red*.