DNS Security Options

DNS Security Options

§  listen-on port 53 {192.168.30.1;};
หมายถึง DNS จะทำงานบน IP 192.168.30.1 เท่านั้น

§  allow-query {192.168.1.0/24; localhost;};
หมายถึง  เป็นการอนุญาตการ query เฉพาะ Internal Network และเครื่องตัวเองเท่านั้น

§  recursion yes;
If yes, and a DNS query requests recursion, then the server will attempt to do all the work required to answer the query. If recursion is off and the server does not already know the answer, it will return a referral response. The default is yes. Note that setting recursion no; does not prevent clients from getting data from the server's cache; it only prevents new data from being cached as an effect of client queries. Caching may still occur as an effect the server's internal operation, such as NOTIFY address lookups. See also fetch-glue above.