Dedicated Name Server Role

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Authoritative-Only Name Server: To audit an authoritative name server, ensure it doesn't answer queries for other non- authoritative domain names. The following command may be run on a Linux system other than the name server to verify the query status is refused. $ dig @<ip_address_of_nameserver> <non_authoritative_name> | grep status; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 52410 Alternatively, the BIND configuration file name.conf and all included configuration files may be searched for the allow-recursion statement.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Authoritative-Only Name Server: For the authoritative-only name server add or modify the allow-recursion statement to only include the localhost to as shown below, or add a recursion statement with a value of no as shown below. options { . . . allow-rescursion { local; }; or recursion no; Caching-Only Name Server: For the caching-only name server remove the non-local zone statements from the configuration file and restart the server.