how to implement DNS server securely

inaki · 09-29-2005, 06:49 AM

Hi all, i have 2 DNS server for primary and secondary. In security overview, u should allow only permitted host fro recursion and forwarder only to the ISP DNS. But i'm not really understand about the zone transfer and which DNS should i configure to allow zone transfer.

Half_Elf · 09-30-2005, 11:04 PM

Not really.
Zone transfert would give an attacker a complete map of your network.. it's avery bad idea to give allow this.

Brian Knoblauch · 10-03-2005, 08:40 AM

Primary needs to allow zone transfer to secondary. Preferably with dnssec.