<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<tt>Security issues!<br>
<br>
Usually you only want *trusted* clients to use your server recursively.<br>
<br>
And you don't really want to allow *any* fetching your hosted zones for
doing something bad, i.e. getting (unwanted!) infos <br>
over your network and infrastructure.<br>
<br>
Regards<br>
<br>
Holger<br>
</tt><br>
<br>
Jukka Pakkanen schrieb:
<blockquote cite="mid:005401ca62c2$77ee3dc0$67cab940$@pakkanen@qnet.fi"
type="cite">
<pre wrap="">Sorry, but could You specify more accurately what is "bad" ? This is
my first bind configuration, so probably I've made some mistakes, but
I'd like to do it the right way in the end.:)
On Tue, Nov 10, 2009 at 11:19 PM, Laurent CARON <a class="moz-txt-link-rfc2396E" href="mailto:lcaron@lncsa.com"><lcaron@lncsa.com></a> wrote:
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre wrap=""> allow-recursion { any; };
</pre>
</blockquote>
<pre wrap="">bad
</pre>
<blockquote type="cite">
<pre wrap=""> allow-transfer { any; };
</pre>
</blockquote>
<pre wrap="">bad
</pre>
</blockquote>
<pre wrap=""><!---->
It's usually a bad idea to allow "any" to use your server recursively, or allow "any" transfer zone data. Like an "open dns-server".
_______________________________________________
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
</pre>
</blockquote>
<BR />
<BR />
<HR />
SIGNAL Krankenversicherung a. G., Sitz: Dortmund, HR B 2405, AG Dortmund<BR />
IDUNA Vereinigte Lebensversicherung aG für Handwerk, Handel und Gewerbe,<BR />
Sitz: Hamburg, HR B 2740, AG Hamburg<BR />
Deutscher Ring Krankenversicherungsverein a.G., Sitz: Hamburg,<BR />
HR B 4673, AG Hamburg,<BR />
SIGNAL IDUNA Allgemeine Versicherung AG, Sitz: Dortmund, HR B 19108,<BR />
AG Dortmund<BR />
Vorstände: Reinhold Schulte (Vorsitzender),<BR />
Wolfgang Fauter (stellv. Vorsitzender), Dr. Karl-Josef Bierth,<BR />
Jens O. Geldmacher, Marlies Hirschberg-Tafel,<BR />
Michael Johnigk, Ulrich Leitermann, Michael Petmecky,<BR />
Dr. Klaus Sticker, Prof. Dr. Markus Warg<BR />
Vorsitzender der Aufsichtsräte: Günter Kutz<BR />
SIGNAL IDUNA Gruppe Hauptverwaltungen, Internet: www.signal-iduna.de<BR />
44121 Dortmund, Hausanschrift: Joseph-Scherer-Str. 3, 44139 Dortmund<BR />
20351 Hamburg, Hausanschrift: Neue Rabenstraße 15-19, 20354 Hamburg<BR />
</body>
</html>