Bind allow-transfer question

[Mark_Andrews at isc.org]

> Hi have a customer that does not want there domain to be accessed via
> nslookup to transfer the contents of the zone file.
> 
> I have added the following;
> 
> zone "domain.com" {
>         type slave;
>         file "domain.com.db";
>         allow-transfer { x.x.x.x; };
> };
> 
> x.x.x.x is the customers Master DNS server.
> 
> Problem when I do this is when I restart named as follow;
> Stopping named:                                            [FAILED]
> Starting named:                                            [  OK  ]
> 
> as soon as I change the named.conf back to master instead of the
> allow-transfer I do not get the FAILED error any longer.  This also affects
> all domains and not just the one domain where the allow-transfer is located.
> 
> I would like to be able to disallow transfers for just there domain and not
> others.  Can anyone help?
> 
> Thanks

	"allow-transfer" specifies who can transfer the zone *from* this server.
	"masters" specifies where to transfer the zone *to* this server from.

	zone "example.com" {
		type slave;
		file "example.com.db";
		masters { x.x.x.x; };
		allow-transfer { none; };
	};

	The above stops all outgoing transfers.

	Mark
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org