summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/domain/dnszonetransferclientsdeny.xml
blob: 8ff8531e9774a4781906252a695348d60f506a3d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
<samba:parameter name="dns zone transfer clients deny"
                 context="G"
                 type="cmdlist"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
	<para>This option specifies the list of IPs denied to ask for dns zone
	    transfer from bind DLZ module.
	</para>

	<para>The IP list is comma and space separated and specified in the same
	    syntax as used in <smbconfoption name="hosts allow"/>, specifically
	    including IP address, IP prefixes and IP address masks.
	</para>

	<para>As this is a DNS server option, hostnames are naturally not permitted.
	</para>

	<para>If a client identified in this list sends a zone transfer request, it will always
              be denied, even if they are in <smbconfoption name="dns zone transfer clients allow"/>.
	      This allows the definition of specific denied clients within an authorized subnet.
	</para>
</description>

<value type="default"></value>
<value type="example">192.168.0.1</value>
</samba:parameter>