Language and Page Formatting Options
33.8. Defining DNS Query Policy
To resolve host names within the DNS domain, a DNS client issues a query to the DNS name server. For some security contexts or for performance, it might be advisable to restrict what clients can query DNS records in the zone.
DNS queries can be configured when the zone is created or when it is modified by using the
--allow-queryoption with the ipa dnszone-mod command to set a list of clients which are allowed to issue queries.
[user@server ~]$ ipa dnszone-mod --allow-query=192.0.2.0/24;2001:DB8::/32;203.0.113.1 example.com
any, which allows the zone to be queried by any client.