Re: Possible DOS in Bind 8.2.2-P5

[Paul Pot <paul_pot () NL SONYMUSIC COM>]

Joseph,

Use the allow-transfer statements in named.conf like
(all your internal DNS servers or just localhost)

hth
paul
*speaking for himself

acl local_dns {
        localhost;
        w.x.y.x;  x.y.w.z;
};

zone "whatever.zone.com" in {
        type master;
        file "whatever.db";
        allow-transfer { local_dns;};
};

-----------------------
[snip]
In neither of these situations did I find any problems after 10 minutes.

If you have other ways you would like me to try running the daemon, let
me know.

Also, I am rather new at bind. How might I go about denying *XFR's from
all but approved hosts?

Thank You

Joseph