[Samba] I can't deny zone transfer when using bind as DNS backend

[Denis Morejon]

It doesn't work for me. I put allow-transfer {"none";}; in 
named.conf.options. Reload the bind9 service.  but I can not avoid the 
zone transfer to the Active Directory Integrated Zone !

I use Samba 4.7.4 (From Source) and BIND 9.10.3-P4-Debian (Debian 9)

This configuration works well on standard zones but not on DLZ (Samba) 
Zones.



El 13/02/18 a las 08:52, L.P.H. van Belle via samba escribió:
> Something like this.
>
>
> options {
>     ....
>     // ban everyone by default
>     allow-transfer {"none";};
> };
> ...
> zone "example.com" in{
>    ....
>    // explicity allow the slave(s) in each zone
>    allow-transfer {192.168.0.3;};
> };
>
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
>> Denis Morejon via samba
>> Verzonden: dinsdag 13 februari 2018 14:44
>> Aan: samba at lists.samba.org
>> Onderwerp: [Samba] I can't deny zone transfer when using bind
>> as DNS backend
>>
>> Hi:
>>
>> How can I either deny zone transfer or restrict it to some
>> DNS servers
>> when using DLZ ?
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>