Few Security Issues With Fresh Install

txt3rob

Verified User
Joined
Jan 16, 2007
Messages
101
i ran Nessus to check over my server afther beeing hacked so i want to plug up lots of holes.

i require help with

Code:
usable remote name server

Synopsis :

The remote name server allows recursive queries to be performed
by the host running nessusd.


Description :

It is possible to query the remote name server for third party names.

If this is your internal nameserver, then forget this warning.

If you are probing a remote nameserver, then it allows anyone
to use it to resolve third parties names (such as www.nessus.org).
This allows hackers to do cache poisoning attacks against this
nameserver.

If the host allows these recursive queries via UDP,
then the host can be used to 'bounce' Denial of Service attacks
against another network or system.

i carnt remember the site that tells you if your DNS is insecure or not
 
Place it within the options { } portion of your named.conf.
 
Back
Top