Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Jul 2001 16:44:35 +0200
From:      "Karsten W. Rohrbach" <karsten@rohrbach.de>
To:        modulus <modulus@icmp.dhs.org>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: named & zone transfers
Message-ID:  <20010719164435.F39506@mail.webmonster.de>
In-Reply-To: <20010718223718.A14766-100000@icmp.dhs.org>; from modulus@icmp.dhs.org on Wed, Jul 18, 2001 at 10:38:57PM -0500
References:  <20010718223718.A14766-100000@icmp.dhs.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--8JPrznbw0YAQ/KXy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

with djbdns' axfrdns you include the to-be-served domain in the
tcpserver allow rule:
    10.0.0.1:allow,AXFR=3D"mydomain.com/otherdomain.org"
which would allow 10.0.0.1 to fetch mydomain.com and otherdomain.org via
tcp/53 axfr.

have fun,
/k

modulus(modulus@icmp.dhs.org)@2001.07.18 22:38:57 +0000:
>=20
> I was wondering how i would restrict all zone transfers
> with the exception of the secondary DNS daemon.
>=20
>=20
>=20
>=20
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

--=20
> Friends don't let friends use sendmail.
KR433/KR11-RIPE -- WebMonster Community Founder -- nGENn GmbH Senior Techie
http://www.webmonster.de/ -- ftp://ftp.webmonster.de/ -- http://www.ngenn.n=
et/
karsten&rohrbach.de -- alpha&ngenn.net -- alpha&scene.org -- catch@spam.de
GnuPG 0x2964BF46 2001-03-15 42F9 9FFF 50D4 2F38 DBEE  DF22 3340 4F4E 2964 B=
F46
Please do not remove my address from To: and Cc: fields in mailing lists. 1=
0x

--8JPrznbw0YAQ/KXy
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7VvJTM0BPTilkv0YRAnSnAJ4mEcjssEETEcEm7uuYSwD6KSJUngCdGxoK
6p3Z7epiTcBL5vP5mPTzQ1U=
=HX/B
-----END PGP SIGNATURE-----

--8JPrznbw0YAQ/KXy--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010719164435.F39506>