You must mean "nslookup"'s "ls" command. Such commands typically use the zone-transfer mechanism. You can restrict zone-transfer access with "allow-transfer". See the documentation for details. - Kevin malegob at my-deja.com wrote: > Hi, How can disable the command ls -d in my DNS, i dont want permit to > the entire world list my entire zones records.