Restricting zone transfers with IP addresses in BIND DNS Server

Posted by nixcraft on Oct 13, 2007 11:27 AM EDT
nixcraft
Mail this story
Print this story

DNS server can be attacked using various techniques such as:
[a] DNS spoofing

[b] Cache poisoning

[c] Registration hijacking

One of the simplest ways to defend is limit zone transfers between nameservers by defining ACL. I see many admin allows BIND to transfer zones in bulk outside their network or organization. There is no need to do this. Remember you don't have to make an attacker's life easier. Restricting zone transfers with IP addresses in BIND DNS Server

Full Story

  Nav
» Read more about: Story Type: Tutorial; Groups: Debian, Fedora, Linux, Mandriva, Novell, Red Hat, Trustix, Turbolinux, Ubuntu, Xandros

« Return to the newswire homepage

This topic does not have any threads posted yet!

You cannot post until you login.