4

INPUT:

dig +multiline google.com axfr

OUTPUT: 

; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> +multiline google.com axfr
;; global options: +cmd
; Transfer failed.

What am I missing?
Regarding: DNS Lookup to Bind config file

Community
  • 1
LanceBaynes
  • 2,907
  • 9
  • 27
  • 31

2 Answers2

6

Google is not going to let you do a zone transfer from them.

Zone transfer permissions are in most cases granted only to a very specific subset of other hosts, and almost never to the public at large.

EEAA
  • 108,414
  • 18
  • 172
  • 242
  • 1
    Will help explain why zone transfers are restricted http://www.sans.org/reading_room/whitepapers/dns/securing-dns-zone-transfer_868 – Sameer May 20 '11 at 05:24
2

You need to use dig against your own nameservers when you attempt a zone transfer. This needs to be specifically permitted by the allow-transfer directive. Zone transfers should be disabled by default to protect the zone from prying eyes and from the possibility of a denial of service attack.

dmourati
  • 24,720
  • 2
  • 40
  • 69