This is a discussion on Re: -t axfer command - DNS ; Here's an example of how to restrict zone transfers: zone "domain.com" IN { type master; allow-transfer { 127.0.0.0/8; 192.168.0.0/16; 123.45.6.78; }; file "domain.com.zone"; }; Only loopback, a private IP range, and a specific IP may transfer the domain.com zone. Dave ...
Here's an example of how to restrict zone transfers:
zone "domain.com" IN {
type master;
allow-transfer { 127.0.0.0/8; 192.168.0.0/16; 123.45.6.78; };
file "domain.com.zone";
};
Only loopback, a private IP range, and a specific IP may transfer the domain.com zone.
Dave
--- Reply to: wharfratjoe---
>
> Is there a way to use a acl statement for the -t axfer command? I only
>
> want certain ip blocks to be able to list out the zone files not the
> whole world.
>
> Running BIND 9.3.0 on windows2003 server
>
> Thanks in advance
> Joe
>
>
>
>