Bind: Disallow AXFR for the high availability zone

OpenConext · Jul 3, 2024 · 5b05cd5 · 5b05cd5
1 parent 9592acf
commit 5b05cd5
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/roles/bind/templates/named.conf.options.j2 b/roles/bind/templates/named.conf.options.j2
@@ -7,6 +7,7 @@ options
         listen-on       port 53 { any; };
         listen-on-v6    port 53 { any; };
         allow-query     { any; };
+        allow-transfer  { none; };
         recursion       no;
         pid-file        "/run/named/named.pid";
         session-keyfile "/run/named/session.key";