[Pdns-users] Re: AXFR's in powerdns

[Benny Amorsen]

On 2003-06-22 at 13:58, Christof Meerwald wrote:

> 4.
> disable-axfr=no
> allow-axfr-ips=127.0.0.1
> 
> pdns 2.9.7: allow
> pdns 2.9.8: allow
> current pdns 2.9.9: deny
> my patch: only allow from 127.0.0.1

I would prefer the 2.9.7/8 semantics for this case. It allows you to
easily remove the access control without having to remove the
allow-axfr-ips line.

disable-axfr is a misnomer though:

> 3.
> disable-axfr=yes
> allow-axfr-ips=127.0.0.1
> 
> pdns 2.9.7: only allow from 127.0.0.1
> pdns 2.9.8: allow
> current pdns 2.9.9: only allow from 127.0.0.1
> my patch: only allow from 127.0.0.1

Obvious AXFR is not /disabled/ in this case. The semantics are fine, the
directive name is unlucky.


/Benny