Re: testing dns servers

From: bariswinston@yahoo.com
Date: Mon Apr 16 2007 - 07:53:21 EDT


('binary' encoding is not supported, stored as-is) Hi,

Here are some additional controls in my mind below that are to be taken account,

1. make sure that any Everyone or Anyone group are not authorized to change or delete zone records,

2. make sure that DNS server has own reverse dns record in reverse lookup zone file,

3. make sure that any unauthorized host's dns record updates are not allowed

Baris Erdogan
 

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:44 EDT