This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Open Resolver Check

I've been experiencing Open DNS Resolver attacks and would like to ensure my UTM isn't acting as an open resolver. I've tested through following means

  • dig +short test.openresolver.com TXT MYIP
    • Running this from outside the network returns ;; connection timed out; no servers could be reached
      • This is because only open dns IP addresses are allowed through port 53.
  • nmap -sU -p 53 -sV -P0 --script "dns-recursion" UTMInternalIP

PORT STATE SERVICE VERSION
53/udp open domain NetWare dnsd
|_dns-recursion: Recursion appears to be enabled

So at this point, I pretty much believe the UTM is acting as an open resolver. I'd like to find out how to disable recursion on my UTM as I am not able to find named.conf or /etc/bind/named.conf.

Thanks.



This thread was automatically locked due to age.
Parents Reply Children
No Data