transfers from slave server

[Kevin Darcy]

Bill Friedman wrote:

> I've set up a slave to serve as backup if master goes down.  What
> controls transfers from slave server when master goes down?  Do I need
> to add allow-transfer to named.conf for each domain?  BIND book just
> says to copy named.conf, change type to slave and include masters { .....

It's really up to you. How free do you want to be with your zone
transfers? Note however that it makes no sense from a security standpoint to
restrict zone transfers on some of the published nameservers for a zone and
not others.

Even if you decide to restrict zone transfers, there should be no reason to
define allow-transfer for each domain if the restriction is the same for all
of them: you can just restrict zone-transfers globally by putting the
allow-transfer in your "options" clause.


- Kevin