MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Development => Topic started by: Spacedust on 2014-02-05, 20:35:44

Title: AXFR and pdns version should be disabled !
Post by: Spacedust on 2014-02-05, 20:35:44

It's a very high security risk:

Just add to your pdns.conf:

disable-axfr=yes
version-string=none

Title: Re: AXFR and pdns version should be disabled !
Post by: MRatWork on 2014-02-06, 04:28:04

disable-axfr make transfer to secondary dns not work. Use 'allow-axfr-ips=XXX.XXX.XXX.0/24,YYY.YYY.YYY.0/24' instead.

Title: Re: AXFR and pdns version should be disabled !
Post by: Spacedust on 2014-02-06, 20:47:18

Quote from: MRatWork on 2014-02-06, 04:28:04

disable-axfr make transfer to secondary dns not work. Use 'allow-axfr-ips=XXX.XXX.XXX.0/24,YYY.YYY.YYY.0/24' instead.

Thanks. How to set custom tpl for powerdns ?

Title: Re: AXFR and pdns version should be disabled !
Post by: MRatWork on 2014-02-06, 20:51:41

Use 'custom rule'. Copy pdns.conf to custom.pdns.conf.

Title: Re: AXFR and pdns version should be disabled !
Post by: Spacedust on 2014-02-09, 22:19:11

Thanks !