security BIND

[Carsten Strotmann]

Hello Alberto,

On Sat, 4 Aug 2012, Alberto Rasillo wrote:

> Hi what are recomendations regarding security and DNS service?Thnks

it is difficult (impossible?) to answer such a generic question.

Generic security advice for a DNS service:
* read your DNS servers documentation carefully
* understand every bit of your configuration
* don't use configuration settings you don't fully understand
* understand hos DNS works (read a good book or visit a good DNS training)
* run recent software (not old software that has know security issues)
* monitor your DNS server (DNS server logfiles, DNS traffic-patterns)
* don't run an 'open resolver' 
(https://otrs.menandmice.com/otrs/public.pl?Action=PublicFAQZoom;ItemID=59)

Anything more specific your would like to know?

-- Carsten