How to stop someone from doing a host -l on your domain...

[goldboyd]

I have a dns server running bind 8.2.4 and was wondering how I can stop somebody from doing a host -l and getting all the hosts i have setup for that domain.

thanks

 

[goldboyd]

never mind, all I needed to do was RTFM

 

[Damaged]

Yah.

options {
allow-transfer { xxx.xxx.xxx.xxx; };

host -l does a zone transfer, then filters out what you specifically requested is all.

If you're running secondaries (slaves in BIND 4 terminology) make sure you allow those hosts.

 

[Damaged]

Oh yeah! And glad to see you're running an up to date version of BIND and are security conscious. I can't tell you how many purported web hosting companies I've run into that allow full zone transfers of their records. BAD! VERY, VERY BAD and those so-called system administrators/engineers should be ashamed.