allow-transfer for master zone

[rieussec]

I am new to the world of dns and bind and wanted to know if there was a reason not to use allow-transfer for the slave in this file ? https://github.com/globocom/GloboDNS/blob/master/app/models/domain.rb#L305

[ernestothorp]

Hello, this config is set via web interface rewriting the named.conf file.
The file you mentioned, manipulate files of zones and include those files to the named.conf.
If you have everything working, go to the bind9 tab, logged as admin, and you will see the config from named.conf for each master and slaves.

[rieussec]

thank you I did not know that allow-transfer could be put also in named.conf and especially I thought that with allow-transfer in a zone we told the master to transfer to the slave, in fact it's the opposite

[ernestothorp]

In our environment, we don't assign specific transfer restrictions in the zone level.