samba - Nov 2024 - bind DLZ deny/allow list

Hi,

starting with Samba-version 4.15 the zone transfer has changed. That's 
what is written in the releasenote:
----------
Up to now, any client could use a DNS zone transfer request to the bind 
server, and get an answer from Samba. Now the default behaviour will be 
to deny those request. Two new options have been added to manage the 
list of authorized/denied clients for zone transfer requests
----------

But it's not mentioned WHAT are these two options are and where to set 
these options and how do I create the list?

Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20241106/8c3790ea/OpenPGP_signature.sig>

On 2024-11-06 7:59 a.m., Stefan Kania via samba wrote:
> Two new options have been added to manage the 
> list of authorized/denied clients for zone transfer requests
> ----------
> 
> But it's not mentioned WHAT are these two options are and where to set 
> these options and how do I create the list?

The two options are:

dns zone transfer clients allow (G)
dns zone transfer clients deny (G)

They are documented in the smb.conf manpage.

/SM