ZONE TRANSFER RESTRICTION

[Barry Margolin]

In article <3823941D.8894956F at montevino.com>,
Lawrence Chan <webmaster at montevino.com> wrote:
>With current BIND setting, one can config the name servers under one's
>administration to restrict zone transfer update to designated secondary
>servers.  Are there ways to ensure that those secondaries (most likely
>under different LAN admin policies) also would oblige with the same
>restriction?  If not, and short of running both primary and secondaries
>on the same LAN, one could easily try for zone transfer from the
>secondaries eventhough restricted from the primary, would it not?

You're correct.  Transfer limitations are not passed along.

-- 
Barry Margolin, barmar at bbnplanet.com
GTE Internetworking, Powered by BBN, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.