The article author seems to ignore the existence of views. If you have confidential data query-able from the outside, it's a much bigger issue than wide open AX

The article author seems to ignore the existence of views. If you have confidential data query-able from the outside, it's a much bigger issue than wide open AXFR... Restricting AXFR is more cute than efficient, the information still leave your network unencrypted. http://www.cyberciti.biz/faq/linux-unix-bind9-named-configure-views/ http://www.cyberciti.biz/faq/linux-unix-bind9-named-configur...