Re: [PEN-TEST] DNS testing tool

[Noel Rosenberg <nrosen04 () EMERALD TUFTS EDU>]

On Wed, 7 Mar 2001, Laura Nuñez wrote:
|       I have this, by the moment
|               - Disable Zone Transfers
|               - Assign reverse DNS to only those host that require it

I would amend this to something like "Assign only uniformative reverse DNS
to all hosts that don't require it."

I allways asign rDNS for all hosts.  However, most are of the form
hxxx-yyy.example.com , where xxx is the subnet and yyy is the last octet.

Ex: h144-120.example.com would be vvv.www.144.120

|               - Split DNS for internal hosts

If by this you mean seperate internal and external DNS, then yes, with
more informative DNS and rDNS on the internal system.

|               - Apply fixes, version upgrades to avoid known
| vulnerabilities
|               - Don't include additional info records,

---Noel Rosenberg
---noel.rosenberg () tufts edu
---"Not the handsome actor...
---    who plays the hero's role." - _Nobody's Hero_ - Rush