docker-bind icon indicating copy to clipboard operation
docker-bind copied to clipboard

Information Disclosure: Disable axfr requests

Open EpicVoyage opened this issue 2 years ago • 0 comments

By default AXFR requests are enabled:

# dig axfr example.com @dns.server.com

This is considered to be a security issue because of the information disclosed:

https://beaglesecurity.com/blog/vulnerability/dns-zone-transfer.html

Could we disable it by default?:

options {
    allow-transfer    { "none"; };
    ...
}

EpicVoyage avatar Jul 02 '22 04:07 EpicVoyage