[Cialug] Bind...

[Aaron Porter]

On 10/12/06, Aaron Porter <atporter at gmail.com> wrote:
> On 10/12/06, Tony Bibbs <tony at tonybibbs.com> wrote:
> > So how do you turn recursion off?  I find it funny they mention it in
> > the context of BIND but don't tell you the setting to turn it off.
>
> The Cymru "Securing Bind" pages are a good resource.
>
> http://www.cymru.com/Documents/secure-bind-template.html

Oh, one caveat; their "bogon" acl, while a really good idea needs to
be updated periodically as the blacklisted IP ranges get assigned. If
you're the kind of admin that leaves things on autopilot for a while,
you might want to avoid that acl -- or risk blacklisting a portion of
the net in the future.