Security scanner warning about zone transfers being allowed, despite zone transfers being disabled in bind.

Solution Unverified - Updated -

Issue

  • Security scanner error: zone transfers allowed.
  • DNS zones have allow-transfer set to None.
  • Error message: DNS Server Zone Transfer Information Disclosure (AXFR) error on TVM plugin 10595

  • Security scanner plugin output:

    + Domain ""localhost"":
localhost. name server localhost.
localhost. has address 127.0.0.1
localhost. has IPv6 address 0000:0000:0000:0000:0000:0000:0000:0001

Environment

  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • bind

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content