How to Use the domain transfer Vulnerability

The region transfer operation refers to a backup server used to refresh its own zone database for the data on its own server. this provides a certain degree of redundancy for the running DNS Service, in order to prevent the Primary Domain Name Server from being unavailable due to unexpected faults from affecting the global situation. however, improper configuration may cause vulnerabilities and leave security risks. Through the domain transfer vulnerability, A large amount of information (A records, CNAME, etc.) of the target user can be obtained to further obtain the network IP address of the target user, so as to analyze the network architecture of the target user, this facilitates penetration.

The query process shows:

The query result is stored in 189store.com.txt.
Run the following command to view

View 189store.com.txt
74 records

Solution:
Neither ns.westidc.com.cn (221.236.9.9) nor ns.westidc.net.cn (210.77.146.30) implement access control.
Define an ACL (Access Control List) to restrict the transfer of regions between domain name servers
Edit/etc/named. conf
Set in zone configuration of 189store.com
Allow-transfer {localhost; 221.236.9.9 ;};
Or
Allow-transfer {localhost; 210.77.146.30 ;};