unapproved AXFR from ... (not zone top)

[Kevin Darcy]

As the name suggests, zone transfers only transfer *zones*, not subdomains. Either configure the slave to
transfer the whole bibos.at zone, or delegate notes.bibos.at as a subzone and then permit 193.171.255.2 to
transfer it.


- Kevin

Wilhelm Grundner wrote:

> hi,
>
> in my acl for zone-transfers i have allowed
> the host '193.171.255.2' - which works fine.
>
> e.g.: bibos.at
>
> but as soon as '193.171.255.2' tries a zone-transfer
> on a subdomain
>
> e.g.: notes.bibos.at
>
> the result is:
>
> Jul 28 08:00:10 ns3 named[841]: unapproved AXFR from [193.171.255.2].60632 for "notes.bibos.at" (not zone top)
> i assume the way this host found out about this
> subdomain is by querying the ns for domain 'bibos.at'
> for ns-records for subdomains - am i correct?
>
> my question is:
>
> is there a restriction for zone-transfers on
> subdomains and if yes - is there a way to change that?
>
> thanks for your help
> regards
> w.grundner
> _____________________________________________________________________
> Wilhelm Grundner                     Email: wilhelm.grundner at debis.at
> debis Systemhaus Oesterreich GmbH    Web:   http://www.debis.at
> Hofmuehlgasse 3-5                    Phone: 0043 1 59903 4390
> A-1060 Vienna, Austria               Fax:   0043 1 59903 4399
> _____________________________________________________________________
>
> p.s.: i found no info on that on
> http://www.acmebw.com/askmrdns/bind-messages.htm