Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
On a BIND 9.x server, for zones split between the external and internal sides of a network, the RRs for the external hosts must be separate from the RRs for the internal hosts.
Description
Discussion Text
Authoritative name servers for an enterprise may be configured to receive requests from both external and internal clients.
External clients need to receive RRs that pertain only to public services (public web server, mail server, etc.).
Internal clients need to receive RRs pertaining to public services as well as internal hosts.
The zone information that serves the RRs on both the inside and outside of a firewall must be split into different physical files for these two types of clients (one file for external clients and one file for internal clients).
External clients need to receive RRs that pertain only to public services (public web server, mail server, etc.).
Internal clients need to receive RRs pertaining to public services as well as internal hosts.
The zone information that serves the RRs on both the inside and outside of a firewall must be split into different physical files for these two types of clients (one file for external clients and one file for internal clients).
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.