Show denied secondary bind transfer attempts

Submitted by:		inTEXT Communications <glenn@intextonline.com>
Ok'd by:		imp, kris
Not objected to by:	freebsd-audit

1 files changed, 7 insertions, 0 deletions

diff --git a/etc/security b/etc/security
index 91ec8d6..4cfba53 100644
--- a/etc/security
+++ b/etc/security
@@ -197,6 +197,13 @@ echo "${host} refused connections:"
 n=$(catmsgs | grep -i "^$yesterday.*refused connect" | tee /dev/stderr | wc -l)
 [ $n -gt 0 -a $rc -lt 1 ] && rc=1
 
+# Show denied secondary bind transfer attempts
+#
+separator
+echo "$host checking for denied secondary zone transfers:"
+n=$(catmsgs | grep -i "unapproved AXFR from" | tee /dev/stderr | wc -l)
+[ $n -gt 0 -a $rc -lt 1 ] && rc=1
+
 rm -f ${TMP}
 
 exit $rc