DNS_Authors_Detection

 

Code: p230

Severity: Notice

 

Description: This event is generated when an attempt is made to query authors.bind on your DNS server.

Impact: Reconnaissance. This informs an attacker that version of BIND running is 9 or greater.

Corrective: Remove the ability to retrieve the authors.bind chaos record by either applying the patch from ISC or by modifying the servers configuration file.