<?xml version="1.0" encoding="UTF-8" standalone="no"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 14. AXFR ACLs</title><link rel="stylesheet" href="docbook.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.75.2" /><link rel="home" href="index.html" title="PowerDNS manual" /><link rel="up" href="index.html" title="PowerDNS manual" /><link rel="prev" href="tsig-outbound-notify-axfr.html" title="2. Provisioning signed notification and AXFR requests" /><link rel="next" href="domainmetadata.html" title="Chapter 15. Per zone settings aka Domain Metadata" /></head><body><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 14. AXFR ACLs</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="tsig-outbound-notify-axfr.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="domainmetadata.html">Next</a></td></tr></table><hr /></div><div class="chapter" title="Chapter 14. AXFR ACLs"><div class="titlepage"><div><div><h2 class="title"><a id="allow-axfr-from"></a>Chapter 14. AXFR ACLs</h2></div></div></div><p> Starting with the PowerDNS Authoritative Server 3.1, per-zone AXFR ACLs can be stored in the domainmetadata table. </p><p> Each ACL row can list one subnet (v4 or v6), or the magical value 'AUTO-NS' that tries to allow all potential slaves in. </p><p> Example: </p><pre class="programlisting"> sql> select id from domains where name='example.com'; 7 sql> insert into domainmetadata (domain_id, kind, content) values (7,'ALLOW-AXFR-FROM','AUTO-NS'); sql> insert into domainmetadata (domain_id, kind, content) values (7,'ALLOW-AXFR-FROM','2001:db8::/48'); </pre><p> </p></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="tsig-outbound-notify-axfr.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="domainmetadata.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">2. Provisioning signed notification and AXFR requests </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 15. Per zone settings aka Domain Metadata</td></tr></table></div></body></html>