From 8daa83a594a2e98f39d764422bfbdbc62c9efd44 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Fri, 19 Apr 2024 19:20:00 +0200
Subject: Adding upstream version 2:4.20.0+dfsg.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 .../domain/dnszonetransferclientsdeny.xml          | 26 ++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 docs-xml/smbdotconf/domain/dnszonetransferclientsdeny.xml

(limited to 'docs-xml/smbdotconf/domain/dnszonetransferclientsdeny.xml')

diff --git a/docs-xml/smbdotconf/domain/dnszonetransferclientsdeny.xml b/docs-xml/smbdotconf/domain/dnszonetransferclientsdeny.xml
new file mode 100644
index 0000000..8ff8531
--- /dev/null
+++ b/docs-xml/smbdotconf/domain/dnszonetransferclientsdeny.xml
@@ -0,0 +1,26 @@
+<samba:parameter name="dns zone transfer clients deny"
+                 context="G"
+                 type="cmdlist"
+                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+	<para>This option specifies the list of IPs denied to ask for dns zone
+	    transfer from bind DLZ module.
+	</para>
+
+	<para>The IP list is comma and space separated and specified in the same
+	    syntax as used in <smbconfoption name="hosts allow"/>, specifically
+	    including IP address, IP prefixes and IP address masks.
+	</para>
+
+	<para>As this is a DNS server option, hostnames are naturally not permitted.
+	</para>
+
+	<para>If a client identified in this list sends a zone transfer request, it will always
+              be denied, even if they are in <smbconfoption name="dns zone transfer clients allow"/>.
+	      This allows the definition of specific denied clients within an authorized subnet.
+	</para>
+</description>
+
+<value type="default"></value>
+<value type="example">192.168.0.1</value>
+</samba:parameter>
-- 
cgit v1.2.3