Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
A BIND 9.x implementation operating in a split DNS configuration must be approved by the organization's authorizing official (AO).
Description
Discussion Text
BIND 9.x has implemented an option to use "view" statements to allow for split DNS architecture to be configured on a single name server.
If the split DNS architecture is improperly configured, there is a risk that internal IP addresses and host names could leak into the external view of the DNS server.
Allowing private IP space to leak into the public DNS system may provide a person with malicious intent the ability to footprint the network and identify potential attack targets residing on the private network.
If the split DNS architecture is improperly configured, there is a risk that internal IP addresses and host names could leak into the external view of the DNS server.
Allowing private IP space to leak into the public DNS system may provide a person with malicious intent the ability to footprint the network and identify potential attack targets residing on the private network.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.