close open DNS server

Author: firstnetguard
Submited At: 2007-03-22
Votes: 0

you made a check on dnsreport.com and you got a FAIL on open dns server?
not a problem, now we show you how to close that gap.

start your favorite editor (vim, nano, pico, ...) and load "/etc/named.conf".

At the beginning you should have something like

key "rndckey" {
};

or

controls {
        inet 127.0.0.1 allow { localhost; } keys { "rndckey"; };
};

after that part insert

acl "trusted" {
        localhost;ServerIP1;ServerIP2;
};

options {
        allow-recursion { trusted; };
        allow-notify { trusted; };
        allow-transfer { trusted; };
};

if you already have a section "options", just add the 3 line into it.
don\'t forget to change "ServerIP1" and "ServerIP2" with your server IP\'s (or even more if necessary).
now restart your named service and check again with www.dnsreport.com

Was this article useful?
YES | NO

close open DNS server

Other useful links