Disabling internet DNS recursion

Hello,

Please have a look at this thread, the user had a similar question. Thank you.

https://community.sophos.com/products/unified-threat-management/f/management-networking-logging-and-reporting/48744/open-resolver-check

Bob

Hi,

Thanks for your help but... how can i disable the recursion for all external IP addresses ?

should i edit :

named.conf  or named.conf-default ?

named.conf is showing the following:

options {
directory "/zones";
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
use-v4-udp-ports { range 24576 45055; };
use-v6-udp-ports { range 24576 45055; };

max-ncache-ttl 900;

check-names master ignore;
check-names slave ignore;
check-names response ignore;

pid-file "/var/run/named.pid";

datasize default;
stacksize default;
coresize default;
recursion yes;
allow-recursion { any; };

.......

-->I believe that a RNDC reload is needed after

Thanks for your help