security BIND

Carsten Strotmann cas at
Sat Aug 4 15:37:34 UTC 2012

Hello Alberto,

On Sat, 4 Aug 2012, Alberto Rasillo wrote:

> Hi what are recomendations regarding security and DNS service?Thnks

it is difficult (impossible?) to answer such a generic question.

Generic security advice for a DNS service:
* read your DNS servers documentation carefully
* understand every bit of your configuration
* don't use configuration settings you don't fully understand
* understand hos DNS works (read a good book or visit a good DNS training)
* run recent software (not old software that has know security issues)
* monitor your DNS server (DNS server logfiles, DNS traffic-patterns)
* don't run an 'open resolver' 

Anything more specific your would like to know?

-- Carsten

More information about the bind-users mailing list