From 5a5bb7591b8d2d577cb402a40540121996ea9c3a Mon Sep 17 00:00:00 2001
From: Brian Somers <brian@FreeBSD.org>
Date: Thu, 8 Feb 2001 20:31:21 +0000
Subject: [PATCH] Show denied secondary bind transfer attempts

Submitted by:		inTEXT Communications <glenn@intextonline.com>
Ok'd by:		imp, kris
Not objected to by:	freebsd-audit
---
 etc/security | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/etc/security b/etc/security
index 91ec8d661754..4cfba5331e3a 100644
--- a/etc/security
+++ b/etc/security
@@ -197,6 +197,13 @@ echo "${host} refused connections:"
 n=$(catmsgs | grep -i "^$yesterday.*refused connect" | tee /dev/stderr | wc -l)
 [ $n -gt 0 -a $rc -lt 1 ] && rc=1
 
+# Show denied secondary bind transfer attempts
+#
+separator
+echo "$host checking for denied secondary zone transfers:"
+n=$(catmsgs | grep -i "unapproved AXFR from" | tee /dev/stderr | wc -l)
+[ $n -gt 0 -a $rc -lt 1 ] && rc=1
+
 rm -f ${TMP}
 
 exit $rc