[Samba] DNS Zone Transfers are Enabled

Rowland penny rpenny at samba.org
Mon Jul 22 07:39:40 UTC 2019


On 22/07/2019 08:24, Eben Victor via samba wrote:
> Hello All,
>
> I hope someone might be able to assist me.
>
> Env:
> RHEL 7
> Samba 4.10
> Bind9 DLZ 9.4
>
> I have tried everything to disable 'DNS Zone Transfers' when using Bind9
> DLZ with Samba ADDC.
>
> I'm using below line , and I have tried different acl's as well, but
> nothing seems to work.
>
> allow-transfer {"none";};
>
> Can someone please advise on how to disable  'DNS Zone Transfers' when
> using Bind9 DLZ with Samba.
>
> Thank you
> Kind regards
>
We have a bug for this: https://bugzilla.samba.org/show_bug.cgi?id=9634

Which has a gitlab page: 
https://gitlab.com/samba-team/samba/merge_requests/169

It looks like there is a fix there, but it looks like your Bind9 version 
(which I take it is actually 9.9.4) will be too old.

Rowland





More information about the samba mailing list