Dedicated Name Server Role

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Authoritative-Only Name Server: To audit an authoritative name server, ensure it doesn't answer queries for other non- authoritative domain names. The following command may be run on a Linux system other than the name server to verify the query status is refused. $ dig @<ip_address_of_nameserver> <non_authoritative_name> | grep status; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 52410 Alternatively, the BIND configuration file name.conf and all included configuration files may be searched for the allow-recursion statement.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Authoritative-Only Name Server: For the authoritative-only name server add or modify the allow-recursion statement to only include the localhost to as shown below, or add a recursion statement with a value of no as shown below. options { . . . allow-rescursion { local; }; or recursion no; Caching-Only Name Server: For the caching-only name server remove the non-local zone statements from the configuration file and restart the server.