You have a local DNS server running but do not appear to have any recursion restrictions set

You have a local DNS server running but do not appear to have any recursion restrictions set. This is a security and performance risk and you should look at restricting recursive lookups to the local IP addresses only

Solution:

edit named.conf file

 
nano /etc/named.conf

add below commands to /etc/named.conf

include "/etc/rndc.key";
controls {
inet 127.0.0.1 allow { localhost;} keys {"rndc-key";};};

acl "trusted"{127.0.0.1;};

and

allow-recursion { trusted;};
allow-notify { trusted;};
allow-transfer { trusted;};
forwarders {127.0.0.1;};

so your named.conf should looks like this:

//// named.conf//// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS// server as a caching only nameserver (as a localhost DNS resolver only).//// See /usr/share/doc/bind*/sample/ for example named configuration files.//

include "/etc/rndc.key";
controls {
inet 127.0.0.1 allow { localhost;} keys {"rndc-key";};};

acl "trusted"{127.0.0.1;};

options {
        listen-on port 53{
                any;};
        listen-on-v6 port 53{
                any;};
        directory       "/var/named";dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursion yes;

allow-recursion { trusted;};
allow-notify { trusted;};
allow-transfer { trusted;};
forwarders {127.0.0.1;};

        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;/* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";};

Restart BIND DNS Server

service named restart
 
  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

Run OPTIMIZE TABLE to defragment tables for better performance

For this suggestion:Run OPTIMIZE TABLE to defragment tables for better performanceRun this...

How to clear Error Log of a cPanel Account.

User the below code to clear Error Log:Replace User with Username:Code:for i in `find...

What is php.ini ?

The php.ini file and changing PHP Settings The php.ini file is a special file for PHP and...

How to fix ini_set() has been disabled for security reasons

1. Create php.ini file inside your public_html folder, OR the folder in which you have...

How to fix Fatal error: Uncaught exception 'Exception' with message 'DateTimeZone:

1: Create .htaccess file inside your public_html folder, OR the folder in which you have...