disable recursion in Bind
February 21, 2006 · Posted in Computer
I just noticed that my dns server was being used as a caching dns server for some random host. In my log files, I was seeing ANY queries for x.h.ctrc.cc. When I looked at the cache, this was for some encoded data.
Using the documentation on this page, I was able to fix this problem. The way that I fixed this was to add the following to the options section:
// version statement for security to avoid
// hacking known weaknesses
version “get lost”;// optional – disables all transfers –
// slaves allowed in zone clauses
allow-transfer {”none”;};// optional – disable all recursive queries
allow-recursion {”none”;};
recursion no;
Technorati Tags: bind, DNS, security
Comments
3 Responses to “disable recursion in Bind”
Leave a Reply
where I can change these parameters? which is the config file for this change?
This is in named.conf or any of the domain specific files
Yes, it was /etc/named.conf
thank you