[bind9] allow transfer, nameserver-only?

[Helmut Schneider]

Helmut Schneider (jumper99 at gmx.de) wrote:
> Kevin Darcy (kcd at daimlerchrysler.com) wrote:
>
>>>I do have ACLs for that but if you maintain a list of zones where the
>>>secondaries are spread over a number of providers it is no fun to
>>>delegate  zone transfer for each zone.
>>
>> Why limit transfers at all?
>
> Why does bind provide options which are totally useless then?

And why am I not allowed to transfer daimlerchrysler.com or isc.org?! I am 
not a security specialist but I assume that there must be a reason for that.

-- 
Please do not feed my mailbox, Swen still does his job well