Allow AXFR for exery zone?

NSD
1

Hello,

We run a hidden master for many zones.
We don't use "pattern:" but list every domain separate in nsd.conf.

Now I was ask to allow zone transfer for a validation process running on a dedicated host.
Beside rewriting the config file for /every/ zone statement to include "provide-xfr: <dedicated ip>"
is there a way to tell nsd: "this ip may transfer every zone without further restrictions" ?

Thanks,
Andreas

2

Hi Andreas,

Beside rewriting the config file for /every/ zone statement to include
"provide-xfr: <dedicated ip>"
is there a way to tell nsd: "this ip may transfer every zone without
further restrictions" ?

No, that's not possible.

I suggest you use patterns, or generate your nsd.conf from a template,
so that you don't have to edit it by hand.

Regards,
Anand