Ryan Sweat wrote:
> We at my ISP do not allow this kind of transfer from anyone except our
> secondary ns, which in my opinion is the best way to go. If you allow AXFR
> transfers from anywhere, anyone can get a list of all your domain records
> and host names, (which in my opion is a bad thing)
OTOH, you can often get a pretty good approximation by looking up one
hostname, then performing reverse DNS lookups on each IP address on
the network block containing the first IP address.
Removing reverse DNS information loses if you need to access services
which are protected by a tcpd which was compiled with -DPARANOID.
--
Glynn Clements <[EMAIL PROTECTED]>
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]