Parallels

Symptoms

This article explains how to allow DNS transfers server-wide (for all domains) in Plesk.

Resolution

Administrator can use global access control list in named.conf.
To set up an ACL, the administrator should insert the values describing DNS slave servers (to which DNS transfers are allowed) into the Plesk database. It can be done using the query:

insert into misc (param,val) values ('DNS_Allow_Transfer1', '192.168.2.11/24');

For the next entry the parameter DNS_Allow_Transfer2 should be used and so on.

IP addresses of the slave hosts should be correctly specified with optional network mask in IP/mask format.

During the DNS reconfiguration the following snippet will be added to the named.conf:

acl common-allow-transfer {
                    xxx.xxx.xxx.xxx;
             };

with values extracted from the Plesk database with DNS_Allow_Transfer% or none parameter if  a value does not exist. Name of this acl will be added to the common-allow-transfer section of each DNS zone.

            zone "zone1.com" {
                     type master;
                     file "zone1.com";
                     allow-transfer {
                             common-allow-transfer;
                     };

             };