Re: BIND9 transferring zones

2003-03-13 Thread Warwick Brown
> > disadvantages: > > > > cannot transfer the zone to another system when backing up zone files > > using dig or nslookup > > You can of course just allow a handful of servers to do transfers, i.e. > off-site DNS backup etc. of course, how silly of me (tis too early for thinking!) there is an a

Re: BIND9 transferring zones

2003-03-13 Thread Simon McCartney
On Thu, Mar 13, 2003 at 09:50:43AM +, Warwick Brown wrote: > On Thursday 13 March 2003 8:52 am, Tomàs Núñez Lirola wrote: > > Hi > > I've heard about disable zone transferring in BIND. I thought it is a good > > idea, in order to hide a little more your net (obviously you can query my > > DNS f

Re: BIND9 transferring zones

2003-03-13 Thread Tomàs Núñez Lirola
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks, but I think we're not talking about the same thing. I was talking about transferring zones, not recursion... Now I've found how to disable it: allow-transfer {}; Here you can list addresses who can transfer zones from your server. If you le

Re: BIND9 transferring zones

2003-03-13 Thread Warwick Brown
On Thursday 13 March 2003 8:52 am, Tomàs Núñez Lirola wrote: > Hi > I've heard about disable zone transferring in BIND. I thought it is a good > idea, in order to hide a little more your net (obviously you can query my > DNS for all possible names and get the same information), but also I > thought

Re: BIND9 transferring zones

2003-03-13 Thread Brad Lay
recursion no; -> /etc/bind/named.conf.options Regards, Brad Lay ([EMAIL PROTECTED]) On Thu, 13 Mar 2003, [iso-8859-1] Tomàs Núñez Lirola wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi > I've heard about disable zone transferring in BIND. I thought it is a good > idea, in orde

BIND9 transferring zones

2003-03-13 Thread Tomàs Núñez Lirola
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I've heard about disable zone transferring in BIND. I thought it is a good idea, in order to hide a little more your net (obviously you can query my DNS for all possible names and get the same information), but also I thought that if BIND transfe

Re: BIND9 transferring zones

2003-03-13 Thread Warwick Brown
> > disadvantages: > > > > cannot transfer the zone to another system when backing up zone files > > using dig or nslookup > > You can of course just allow a handful of servers to do transfers, i.e. > off-site DNS backup etc. of course, how silly of me (tis too early for thinking!) there is an a

Re: BIND9 transferring zones

2003-03-13 Thread Simon McCartney
On Thu, Mar 13, 2003 at 09:50:43AM +, Warwick Brown wrote: > On Thursday 13 March 2003 8:52 am, Tomàs Núñez Lirola wrote: > > Hi > > I've heard about disable zone transferring in BIND. I thought it is a good > > idea, in order to hide a little more your net (obviously you can query my > > DNS f

Re: BIND9 transferring zones

2003-03-13 Thread Tomàs Núñez Lirola
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks, but I think we're not talking about the same thing. I was talking about transferring zones, not recursion... Now I've found how to disable it: allow-transfer {}; Here you can list addresses who can transfer zones from your server. If you le

Re: BIND9 transferring zones

2003-03-13 Thread Warwick Brown
On Thursday 13 March 2003 8:52 am, Tomàs Núñez Lirola wrote: > Hi > I've heard about disable zone transferring in BIND. I thought it is a good > idea, in order to hide a little more your net (obviously you can query my > DNS for all possible names and get the same information), but also I > thought

Re: BIND9 transferring zones

2003-03-13 Thread Brad Lay
recursion no; -> /etc/bind/named.conf.options Regards, Brad Lay ([EMAIL PROTECTED]) On Thu, 13 Mar 2003, [iso-8859-1] Tomàs Núñez Lirola wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi > I've heard about disable zone transferring in BIND. I thought it is a good > idea, in orde

BIND9 transferring zones

2003-03-13 Thread Tomàs Núñez Lirola
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I've heard about disable zone transferring in BIND. I thought it is a good idea, in order to hide a little more your net (obviously you can query my DNS for all possible names and get the same information), but also I thought that if BIND transfe