search

sameersbn / docker-bind

Dockerize BIND DNS server with webmin for DNS administration
MIT License
913 stars 333 forks source link

Information Disclosure: Disable axfr requests #119

Open EpicVoyage opened 2 years ago

EpicVoyage commented 2 years ago

By default AXFR requests are enabled:

# dig axfr example.com @dns.server.com

This is considered to be a security issue because of the information disclosed:

https://beaglesecurity.com/blog/vulnerability/dns-zone-transfer.html

Could we disable it by default?:

options {
    allow-transfer    { "none"; };
    ...
}