disable recursion in Bind

I just noticed that my dns server was being used as a caching dns server for some random host.  In my log files, I was seeing ANY queries for x.h.ctrc.cc.  When I looked at the cache, this was for some encoded data.

Using the documentation on this page, I was able to fix this problem.  The way that I fixed this was to add the following to the options section:

// version statement for security to avoid
// hacking known weaknesses

version "get lost";

// optional - disables all transfers -
// slaves allowed in zone clauses

allow-transfer {"none";};

// optional - disable all recursive queries

allow-recursion {"none";};

recursion no;

Technorati Tags: bind, DNS, security