Skip to content

Information Disclosure: Disable axfr requests #119

@EpicVoyage

Description

@EpicVoyage

By default AXFR requests are enabled:

# dig axfr example.com @dns.server.com

This is considered to be a security issue because of the information disclosed:

https://beaglesecurity.com/blog/vulnerability/dns-zone-transfer.html

Could we disable it by default?:

options {
    allow-transfer    { "none"; };
    ...
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions