diff --git a/roles/bind/templates/named.conf.options.j2 b/roles/bind/templates/named.conf.options.j2
index 5c884184a..3e4b32dc2 100644
--- a/roles/bind/templates/named.conf.options.j2
+++ b/roles/bind/templates/named.conf.options.j2
@@ -7,6 +7,7 @@ options
         listen-on       port 53 { any; };
         listen-on-v6    port 53 { any; };
         allow-query     { any; };
+        allow-transfer  { none; };
         recursion       no;
         pid-file        "/run/named/named.pid";
         session-keyfile "/run/named/session.key";