Tuesday, September 30, 2014

How to check / hide BIND version & hostname


The Berkeley Internet Name Domain (BIND) name server return their version number / host name when queried for it. This expose the DNS server for a know venerability straight way. This tutorial shows you how to query DNS servers for their version / host name and how to stop your BIND server from exposing the version / hostname.

Query to a BIND server for a TXT resource record in class 3 (CHAOS) for the domain name "VERSION.BIND." will return a version of the BIND server & the  Query to a BIND server for a TXT resource record in class 3 (CHAOS) for the domain name "HOSTNAME.BIND." will return a host name of the DNS server.



The following DIG and NSLOOKUP queries will show the version of BIND follow by host name.

Perform a "dig" to get the BIND version.



Perform a "nslookup" to get the BIND version.




Perform a "dig" to get the BIND host name.




Perform a "nslookup" to get the BIND host name.



When running a BIND nameserver, edit your /etc/named.conf file (the location of the file "named.conf" will change) and add the following option followed by any string within quotes & reload the "named" service

options {
    [...]
    version "Not supported";
    hostname "Not supported";
}


Perform a "dig" and followed by "nslookup" to get the BIND version & host name and you can see the DNS server is no longer giving the version & host name.










To disable the TXT query for class 3 "CHAOS" add the following option followed by string none without quotes & reload the "named" service


options {
    [...]
    version none;
    hostname none;
}










Leave your comment below


6 comments:

  1. Wow! Such an amazing and helpful post this is. I really really love it. It's so good and so awesome. I am just amazed. I hope that you continue to do your work like this in the future also script cek mutasi

    ReplyDelete
  2. The sum total of what consideration has been moved in the direction of information and strategies to oversee it. Nonaka (1991) states that information and its key use is one certain wellspring of supported upper hand for associations. Experts Network

    ReplyDelete
  3. You completely match our expectation and the variety of our information. Buy GHB Powder Online

    ReplyDelete
  4. Electronic game worlds have generated billions of dollars, with millions of players around the world fighting, buying, crafting, and selling in a variety of online environments csgo high tier accounts

    ReplyDelete
  5. PUBG employs a physics engine that can make your car react in a realistic way to bumpy, unstable terrain, so head's up: you will end up going airborne. If you're not great with bumps, stay between the lines and stick to the road for a (generally) smoother ride. pubg mobile accounts

    ReplyDelete