Getting complete zone file?

[s]

"Barry Margolin" <barmar at alum.mit.edu> schreef in bericht
news:barmar-5BC116.17221229092004 at comcast.dca.giganews.com...
> In article <cjeebm$tms$1 at sf1.isc.org>, "s" <activeco at home.nl> wrote:
>
> > Is there some way to get list of all (sub)domains from a zone file of a
> > particular name server?
>
> dig <zone> axfr @<server>
>
> will return the contents of the zone.
>
> --
> Barry Margolin, barmar at alum.mit.edu
> Arlington, MA
> *** PLEASE post questions in newsgroups, not directly to me ***
>

Nice, thanks.

What would be the right way to disable such queries at own nameserver?
Iptables? Any example?
TIA again.