Topic: How to secure zone transfers?

Recently I read about AXFR attacks. How can I prevent them in Bind 9?

Share

Re: How to secure zone transfers?

If you have two DNS servers, which we will refer to as ns1 (10.1.1.1) and ns2 (10.1.1.2). ns1 serves as the master for the 'example.com' zone, and ns2 slaves this zone off the primary. Then to secure your Bind configuration, you should add following lines to your named.conf:

Master:

acl "xfer" {
        10.1.1.2;
};

zone "example.com" IN {
        type master;
        file "/path/to/zone/file/example.com";
        notify yes;
        allow-update { none; };
        allow-query { any; };
        allow-transfer { xfer; };
};

Slave:

zone "example.com" IN {
        type slave;
        masters { 10.1.1.1; };
        file "/path/to/zone/file/example.com";
        notify no;
        allow-query { any; };
        allow-transfer { none; };
};

To check that AXFR secured run command:

# dig example.com @ns1.example.com. axfr

And you will see something like this:

; <<>> DiG 9.8.5-P1 <<>> example.com @ns1.example.com. axfr
;; global options: +cmd
; Transfer failed.

Re: How to secure zone transfers?

Discount Real Elocon Buying In Germany Acheter Kamagra France  canadian cialis Cialis At Discount Cialis Y Antidepresivos

Share

Re: How to secure zone transfers?

Cialis Apotheke Osterreich Buy Cialis Overnight Delivery  where to purchase low cost levitra Where Can I Buy Flagyl 500mg Amoxicillin Squirrels

Share

Re: How to secure zone transfers?

Buy Amoxicillin Online In Uk Sans Ordonnance Amoxicillin Sans Prescrire France  cheapest cialis 20mg Kamagra Bestellen Wo

Share

Re: How to secure zone transfers?

Farmacias Online En Canada Levitra Mejor Que Cialis 90 Tablets Generic Propecia  canadian pharmacy cialis 20mg Amoxicillin Zithromax Priligy Equivalent

Share

Re: How to secure zone transfers?

On Line Amoxicilina Cuando Tomar Priligy  generic cialis from india Cephalexin Warnings Keflex 750 Cap

Share

Re: How to secure zone transfers?

Fedex Delivery Cephalexin Cialis Recreatif Keflex To A Cat   Achat Kamagra Paris

Share

Re: How to secure zone transfers?

Buy Cheap Zocor Without Prescription  gen health levitra Is Keflex Safe With Coumadin Elavil

Share

Re: How to secure zone transfers?

Amoxicillin Rash And Itching In Children  cialis 5 vademecum Viagra For Sale In Winnipeg

Share

Re: How to secure zone transfers?

Super Generac Viagra  viagra Kamagra Paypal Viagra En Mujeres

Share

Re: How to secure zone transfers?

Does Generic Viagra Really Work Can I Buy Nexium Online  viagra Cialis E Reni

Share

Re: How to secure zone transfers?

Effet Secondaire Mifepristone Calvicie Propecia Amoxicillin Interaction With Sudafed  viagra Toronto Drug Store Pharmacy Propecia En Exceso Is Doxycycline The Same As Amoxicillin

Share