Bind and DLZ Memo

bind_dlz.md

Bind, DLZ

• After Bind v9.6, DLZ included.

Disable the recusive query other than internal domains or ips

acl corpnets {
  36.231.157.56/32;
  114.34.18.168/32;
}
allow-recursion { corpnets; };

or disable all

resursion no;

In MySQL

dns_zones

• domains

dns_records

• @A
• @NS
• @SOA

Prevent DDoS attack

iptables -t raw -I PREROUTING -i eth0 -p udp --destination-port 53 \
    -m string --algo kmp --from 30 \
    --hex-string "|01000001000000000000|" -j DROP