[bind10-dev] Forward: RE: allow/deny xfr requests by default?

[Peter Koch]

On Thu, Feb 09, 2012 at 07:50:18AM +0000, Francis Dupont wrote:

> control. In fact, IMHO it is important for smooth bind version transition
> to keep such a policy, i.e., even if the default is reversed the 9to10
> config translator should keep the current default (i.e., vs. KISS).

merci, Francis.  Changing defaults exposes the administrator to surprises
and if BIND10 is marketed as a drop in replacement for BIND9, this applies
even across a major version number change.  Then again, a really curious
admin would not rely upon the defaults anyway.
The question whether or not to open XFR is kind of orthogonal to this.

-Peter