Hide your BIND version

Contributor Icon Contributed by skreuzer Date Icon October 18, 2003  
Tag Icon Tagged: Linux security

Any user can discover the version of bind you are running with the following command: nslookup -q=txt -class=CHAOS version.bin.remote.dns.server


To hide your version of bind, add the following value to named.conf
version "[SECURED]"
in the options section section as follows:

options {
directory "/var/named";
version "[SECURED]";
};

and restarted named.

Previous recipe | Next recipe |
 
  • OliNether
    Just wanted to correct a little TYPO :

    to really check the version of bind remotely the command is :

    $ nslookup -q=txt -class=CHAOS version.bind dns.server.tld
  • OliNether
    BTW, since nslookup is deprecated, you can & should of course do the same with dig :

    $ dig @dns.server.tld -c CH -t txt version.bind
blog comments powered by Disqus