MvincM
8th November 2006, 14:55
Hi,
Maybe anybody knows how to turn off the DNS for ISPConfig? I don not use DNS in ISP so I don't need them. As we known it is better to run off services which are not used (specially BIND).
On Debian I try to normally stop bind9 but ISP start him on his start/stop/restart process. So I don't want to use: "update-rc.d -f bind9 remove" because I can broke ISP (I think).
So I chose to secure DNS only to listen on localhost by editing confs file:
named.conf.options
listen-on port 53 { 127.0.0.1; };
listen-on-v6 { none; };
allow-query { 127.0.0.1; };
query-source address 0.0.0.0 port 53;
controls {
inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
};
but after that my "netstat -lp" looks like:
tcp 0 0 localhost:953 *:* LISTEN 2930/named
udp 0 0 *:domain *:* 2930/named
udp 0 0 localhost:domain *:* 2930/named
udp6 0 0 *:46768 *:* 2930/named
so "*" mean that is open on all interfaces.
I don't have any idea for next search. Could you be so kind and help me or share your experience.
Thanks!
Best regards,
MvincM
Maybe anybody knows how to turn off the DNS for ISPConfig? I don not use DNS in ISP so I don't need them. As we known it is better to run off services which are not used (specially BIND).
On Debian I try to normally stop bind9 but ISP start him on his start/stop/restart process. So I don't want to use: "update-rc.d -f bind9 remove" because I can broke ISP (I think).
So I chose to secure DNS only to listen on localhost by editing confs file:
named.conf.options
listen-on port 53 { 127.0.0.1; };
listen-on-v6 { none; };
allow-query { 127.0.0.1; };
query-source address 0.0.0.0 port 53;
controls {
inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
};
but after that my "netstat -lp" looks like:
tcp 0 0 localhost:953 *:* LISTEN 2930/named
udp 0 0 *:domain *:* 2930/named
udp 0 0 localhost:domain *:* 2930/named
udp6 0 0 *:46768 *:* 2930/named
so "*" mean that is open on all interfaces.
I don't have any idea for next search. Could you be so kind and help me or share your experience.
Thanks!
Best regards,
MvincM