Open recursive resolver fix

From vpsget wiki
Revision as of 10:01, 7 July 2015 by Vq (talk | contribs) (Created page with "Open recursive resolver running on your server is a vulnerability to DNS Amplification attacks and should be fixed. Easiest way to find out if you have it: http://openresolve...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Open recursive resolver running on your server is a vulnerability to DNS Amplification attacks and should be fixed.

Easiest way to find out if you have it: http://openresolver.com/

How to fix:

Open the file /etc/named.conf and disable recursion:

options {
 recursion no;
 additional-from-cache no;
 };

Restart named:

/etc/init.d/named restart