[Samba] I can't deny zone transfer when using bind as DNS backend

Rowland Penny rpenny at samba.org
Tue Feb 13 21:14:15 UTC 2018

On Tue, 13 Feb 2018 15:50:11 -0500
Denis Morejon via samba <samba at lists.samba.org> wrote:

> It doesn't work for me. I put allow-transfer {"none";}; in 
> named.conf.options. Reload the bind9 service.  but I can not avoid
> the zone transfer to the Active Directory Integrated Zone !
> I use Samba 4.7.4 (From Source) and BIND 9.10.3-P4-Debian (Debian 9)
> This configuration works well on standard zones but not on DLZ
> (Samba) Zones.

I think you are going to have to explain what you are trying to do, it
sounds like you are trying to stop bind using the dns info in AD.


More information about the samba mailing list