[cobalt-users] DNS Zone Transfers being permitted - why?

["Rick Ewart" <cobalt@xxxxxxxxx>]

Hello all.

Well, I just came to a realization that my DNS servers appear to be
permitting zone transfers out to the free world, and I am not sure what to
do about it.... I am running 8.3.4REL of named, compiled and installed
according to Gerald's instructions.

I started with the GUI, and noted that only my secondary DNS is listed to
permit transfers. Then did a bit of research and saw that the "allow
transfer" directive is used in named.conf to restrict domains. I checked
mine and it does have a directive that corresponds with my secondary:
    options {
            directory "/etc/named";
            allow-transfer { 216.219.239.8 };
    };
    zone "." { type hint; file "db.cache"; };

Then I looked at the records file in /etc/named, and it shows an extry axs
as the first item, which also appears to be the entry for the secondary.

Anybody know why this it is letting systems other than my secondary perform
zone transfers? I am not sure where else to look.

Thanks.
Rick