Detections
Analytics

2.2.7 Ensure DNS Server is not installed

Information

The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses for computers, services and other resources connected to a network.

Unless a system is specifically designated to act as a DNS server, it is recommended that the package be deleted to reduce the potential attack surface.

Solution

Run the following commands to disable DNS server :

# apt purge bind9

See Also

https://workbench.cisecurity.org/benchmarks/13007

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: a8c40cbcf577807849eec23b454e93f9ffd8fb6abc5ed2b2f7e9ce075d6a2de1