https://community.hpe.com/t5/operating-system-hp-ux/securing-hp-ux-dns/m-p/3192191#M748558 Hi,<BR /><BR />SANS is one of the best security resources.<BR /><BR />Check out this link for DNS security issues you would want to be concerned with:<BR /><A href="http://www.sans.org/rr/catindex.php?cat_id=17" target="_blank">http://www.sans.org/rr/catindex.php?cat_id=17</A><BR /><BR />Hope this helps. Regards.<BR /><BR />Steven Sim Kok Leong Sun, 15 Feb 2004 00:56:00 GMT Steven Sim Kok Leong 2004-02-15T00:56:00Z https://community.hpe.com/t5/operating-system-hp-ux/securing-hp-ux-dns/m-p/3192190#M748557 We have one DNS server on our network that all the Asian root servers love to send binaries to over port 53. Hence I have the following 2 questions.<BR /><BR />2 Questions:<BR /><BR />1) Is there a way we can secure the DNS server to reject a DNS response with binary code in it?<BR /><BR />2) Is there really some legimate DNS traffic to a BIND server that should be from a root server? Or in other words, is there going to be any problems if we start blocking this type of traffic.<BR /><BR />Michael Fri, 13 Feb 2004 17:28:06 GMT https://community.hpe.com/t5/operating-system-hp-ux/securing-hp-ux-dns/m-p/3192190#M748557 Michael_423 2004-02-13T17:28:06Z https://community.hpe.com/t5/operating-system-hp-ux/securing-hp-ux-dns/m-p/3192191#M748558 Hi,<BR /><BR />SANS is one of the best security resources.<BR /><BR />Check out this link for DNS security issues you would want to be concerned with:<BR /><A href="http://www.sans.org/rr/catindex.php?cat_id=17" target="_blank">http://www.sans.org/rr/catindex.php?cat_id=17</A><BR /><BR />Hope this helps. Regards.<BR /><BR />Steven Sim Kok Leong Sun, 15 Feb 2004 00:56:00 GMT https://community.hpe.com/t5/operating-system-hp-ux/securing-hp-ux-dns/m-p/3192191#M748558 Steven Sim Kok Leong 2004-02-15T00:56:00Z