For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ravitheja_28471's avatar
Ravitheja_28471
Icon for Nimbostratus rankNimbostratus
Aug 22, 2016

Open Recursive DNS Resolvers

Open Recursive DNS Resolvers

 

Hello, one of our F5 GTM devices are acting as open recursive dns resolvers. But, actually they should act as to respong for only of our domain queries. I found that this may cause for DDos attacks. Please let me know what are precautions i should take to resolve this.

 

Thanks, Ravitheja

 

BIG-IP
BIG-IP DNS
security

4 Replies

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Aug 23, 2016

    that remains unclear to me, what is your domain, is that the clients in your organisation, or the DNS domain for your organisation ?

     

  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Icon for MVP rankMVP
    Aug 28, 2016

    You might want to check the named configuration in ZoneRunner. Make sure that recursion is set to no. This should be the default. For more in check:

     

    https://support.f5.com/kb/en-us/solutions/public/7000/000/sol7055.html