[Samba] I can't deny zone transfer when using bind as DNS backend

Marc Muehlfeld mmuehlfeld at samba.org
Tue Feb 13 21:57:42 UTC 2018

Hi Denis,

Am 13.02.2018 um 14:44 schrieb Denis Morejon via samba:
> How can I either deny zone transfer or restrict it to some DNS servers
> when using DLZ ?

You can use the internal DNS instead of BIND. ;-)


Summary: If you use BIND9_DLZ, zone transfers are always allowed. If you
use INTERNAL_DNS, they are denied. However, in both cases it's not
configurable. It's an inconsistent behaviour.


More information about the samba mailing list