Domain Name System (DNS) records map domain names to IP addresses. During audits, mapping DNS records helps outline a company’s public network footprint.
1. DNS Zone Transfers (AXFR)
A zone transfer is used to replicate DNS records across master and slave servers. If name servers are misconfigured to allow public zone transfers, anyone can request the entire DNS table, exposing all internal domain names and IP addresses.
2. Querying Zone Transfers with dig
Verify if a server allows anonymous zone transfers using the `dig` command-line tool:
dig axfr @ns1.targetdomain.com targetdomain.com3. Remediation
Configure DNS name servers to restrict AXFR zone transfer requests strictly to trusted slave server IP addresses.