தொகுதி பாடங்கள் (3/4)
Resolver aperti e AXFR
Open resolvers and AXFR
A recursive resolver that accepts queries from everyone can be abused for unwanted lookups or as part of reflection and amplification attacks. A public authoritative server has a different role: it answers for its zones and should not offer unrestricted recursion.
AXFR transfers a complete zone, usually to an authorized secondary. Allow it only to known peers and authenticate transfers where supported. A public resolver should not expose internal names or act as an open recursive service. Apply access controls, response-rate measures, software updates, and monitoring appropriate to the role of each server.
Keep resolver and authoritative functions separate where practical, and test exposure only on systems you own or are authorized to assess.
Check your understanding
Choose the best answer. This quiz runs locally and sends no DNS queries to real domains.
How can you limit abuse of an organization’s resolver?