Re: BIND9 transferring zones

[Tomàs Núñez Lirola <tomas@asertel.es>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks, but I think we're not talking about the same thing.
I was talking about transferring zones, not recursion...

Now I've found how to disable it:

allow-transfer {};

Here you can list addresses who can transfer zones from your server. If you 
leave it empty, no one can transfer your zones.

But I was more interested in the point of advantages/inconvenients, I don't 
want secondary effects if I disable zone transfer. Some comment about this?

Thanks!

El Jueves, 13 de Marzo de 2003 10:44, Brad Lay escribió:
> recursion no;
> -> /etc/bind/named.conf.options
>
>
> Regards,
>
> Brad Lay
> (brad@coombabah.net)
>
> On Thu, 13 Mar 2003, [iso-8859-1] Tomàs Núñez Lirola wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi
> > I've heard about disable zone transferring in BIND. I thought it is a
> > good idea, in order to hide a little more your net (obviously you can
> > query my DNS for all possible names and get the same information), but
> > also I thought that if BIND transfer zones by default, it has some
> > reason.
> >
> > So can anyone comment inconvenients/advantages of disabling transfer DNS
> > zones?
> >
> > BTW: How can I disable zone transferring?
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.1 (GNU/Linux)
> >
> > iD8DBQE+cEbrGOU6HQZ81TcRAgfbAJ9g5nOKxrQeLu+gZzu9VdaRIIXSLwCfbJmv
> > 3xRFz01A2iB0AbwIN/l6Wt0=
> > =QeqQ
> > -----END PGP SIGNATURE-----
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact
> > listmaster@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+cFgZGOU6HQZ81TcRAmeDAKCB+DYwTvADA7EttapIC0NshATKggCggezM
anEttBV8kXZ9G46LPICPMTs=
=gALb
-----END PGP SIGNATURE-----