How to hide result from dig @MyDnsServer my.domain ns

[HappyPotter]

For security, I dont want people to guess my server location.

Is it possible to hide the result if hacker queries directly using the correct nameserver?

dig @MyDnsServer my.domain ns

;; AUTHORITY SECTION:
my.domain.        3600    IN    NS    ns.MyDnsServer
my.domain.        3600    IN    NS    ns.MyDnsServer

I tried and can delete A/TXT/MX records, but directadmin tells me I have to keep at least one nameserver.

The real NS of my.domain is on cloudflare. www & @ are pointed using A records with read IP.

Is it possible to achieve this? or is there any way I can somehow block from query on specific domain?

Thank you.

 

[Zhenyapan]

If there NS record in your DA panel - it didn't mean it visible from outside - till you configure it from domain registrar. Also you can totally shutdown named/bind service. Also close 53 port in firewall, or all ports except http/https and ssh - if you don't need them.

 

[HappyPotter]

If there NS record in your DA panel - it didn't mean it visible from outside - till you configure it from domain registrar. Also you can totally shutdown named/bind service. Also close 53 port in firewall, or all ports except http/https and ssh - if you don't need them.

Thanks for your suggestions.

A bit trouble is that, some other domains on my DA are pointing the same nameserver. Thats why I cant directly close named/bind/port 53.

Is it possible if I manually modify `/etc/named.conf` or `/var/named/my.domain.db`? If I do not change settings in DA web pannel, will these 2 files be overwritten automatically?

Thanks!!

 

[Zhenyapan]

just put there nonexisting NS and change IP for it to 127.0.0.1

 

[HappyPotter]

I found the solution.

by adding `allow-query { none; };` in `/etc/named.conf`

zone "my.domain" { type master; file "/var/named/my.domain.db"; allow-query { none; }; };

 

[zEitEr]

@HappyPotter,

Just make sure your custom entries do not get removed when adding new domains in the control panel.