[nsd-users] Unsecured zone transfers and open resolvers

Jan-Piet Mens jpmens.dns at gmail.com
Thu Jul 19 07:46:54 UTC 2012

> I have encountered in my DNS studies a few name servers that let you
> transfer zones they are authoritative for.

A number of TLD operators offer AXFR for their zones on purpose (e.g. 

        dig @xfr.lax.dns.icann.org . axfr

> This led me to the conclusion that
> the sys admins don't pay enough attention or don't really know or
> understand DNS technology.

They do. Really. :)


More information about the nsd-users mailing list