I am getting security notice for Bind DNS server

hardik

I'm using vultr VPS, they said the DNS Bind server has some security issues.

DNS is used to translate hostnames into IP addresses. When DNS servers are misconfigured, they can be used to conduct DDOS attacks. We recommend that all public DNS servers are configured to not permit recusrive DNS queries. This configuration will still allow DNS for your domain names to work properly, but will prevent abuse

If for some reason you cannot make the necessary changes and you are not hosting your own DNS, we would suggest that you firewall off all incoming UDP port 53 traffic.

Please see https://blog.cloudflare.com/reflections-on-reflections/ for more information on reflection attacks

This is what email i got, there seems some security issue with DNS, how to solve it?

aaPanel_Jose

hardik
hello,
The configuration file is in /var/named/chroot/etc/named.conf
Set recursion no;

Restart the dns service after the modification is completed.

#Stop dns service
Pkill -9 named

#Start dns service
/usr/sbin/named -u named -c /etc/named.conf -t /var/named/chroot

We will set the recursive query to off by default in the next version.

hardik

Thank you 🙂 Hare Krishna