[cobalt-security] Re: approved AXFR

["David Thacker" <Cobalt@xxxxxxxxxxxxxx>]

> Stick on a DNS ACL to stop Zone transfers, except to your named
secondaries
> i.e.
> options {
>         directory "/etc/named";
>         allow-transfer {
>                 // ???.??.????????.net
>                 C.D.197.133
>                 // ??.????????.com
>                 A.B.202.244;
>         };
>         version "......";
> };
>


Hi,

This function is also available in the Cobalt DNS GUI.  From the DNS
Settings form (on any domain), select Server Settings from the Add droplist.
Simply enter the allowed IP addresses, one per line, in the Zone Transfer
Access field.  Make sure to not have a blank line at the bottom of the
field.

dAvid tHacker
Thacker Network Technologies Inc.
Cobalt@xxxxxxxxxxxxxx