I get refused error even if the update is run from the dnsserver(bind) as well. Please help

named.local file is as below.

//include "/etc/bind/zones.rfc1918";

key "heos.com." {
algorithm hmac-md5;
secret "Xx3B/YjpfCYBZgMAxVBoQZb4jLgxBSY2lz3TQ96V6NqykQO2Ni6zb63eCpu9939XiyfLSUmf42jvdY1pOdVRFw==";
};


zone "heos.com" {
type master;
file "/etc/bind/db.heos.com";
allow-update { localhost; key "heos.com."; };
allow-query { any; };
allow-transfer { any; };
// update-policy {
// grant * self * A TXT;
// };
};
zone "57.126.10.in-addr.arpa" {
type master;
file "/etc/bind/db.10";
allow-update { localhost; key "heos.com."; };
allow-query { any; };
allow-transfer { any; };
// update-policy {
// grant * self * A TXT;
// };
};
logging {
channel query.log {
file "/var/log/query.log";
severity debug 1;
};
category queries { query.log; };
};
[/QUOTE][/QUOTE]


nsupdate output with error:
[root@dydns cloud-user]# ./do-nsupdate nsupdate.txt
Creating key...
get_next_command()
evaluate_update()
update_addordelete()
get_next_command()
show_message()
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
57.126.10.in-addr.arpa. 600 IN PTR dydns.heos.com.

get_next_command()
start_update()
recvsoa()
About to create rcvmsg
Destroying request [0x7f4b2a304eb0]
retrying soa request without TSIG
recvsoa()
About to create rcvmsg
show_message()
Reply from SOA query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52868
;; flags: qr aa ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;57.126.10.in-addr.arpa. IN SOA

;; ANSWER SECTION:
57.126.10.in-addr.arpa. 604800 IN SOA heos-dns.heos.com. root.heos.com. 1 604800 86400 2419200 604800

;; AUTHORITY SECTION:
57.126.10.in-addr.arpa. 604800 IN NS heos-dns.

Found zone name: 57.126.10.in-addr.arpa
The master is: heos-dns.heos.com
send_update()
Sending update to 10.126.58.21#53
show_message()
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 63029
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1
;; UPDATE SECTION:
57.126.10.in-addr.arpa. 600 IN PTR dydns.heos.com.

;; TSIG PSEUDOSECTION:
heos-dns.heos.com. 0 ANY TSIG hmac-md5.sig-alg.reg.int. 1403532968 300 16 otY8u8sj0Cp8Lk5wjCsYlw== 63029 NOERROR 0

Out of recvsoa
update_completed()
; TSIG error with server: expected a TSIG or SIG(0)
show_message()

Reply from update query:
;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 63029
;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; ZONE SECTION:
;57.126.10.in-addr.arpa. IN SOA

done_update()
reset_system()
user_interaction()
get_next_command()
cleanup()
detach tsigkey x0x7f4b2a30c0b8
Shutting down task manager
shutdown_program()
Shutting down request manager
Destroy DST lib
Destroying request manager
Freeing the dispatchers
Shutting down dispatch manager
Destroying event
Shutting down socket manager
Shutting down timer manager
Destroying hash context
Destroying name state
Removing log context
Destroying memory context
[root@dydns cloud-user]#