BIND-9X-001005 - The host running a BIND 9.x implementation must use a dedicated management interface in order to separate management traffic from DNS specific traffic.

Information

Providing Out-Of-Band (OOB) management is the best first step in any management strategy. No production traffic resides on an out-of-band network. The biggest advantage to implementation of an OOB network is providing support and maintenance to the network that has become degraded or compromised. During an outage or degradation period the in band management link may not be available.

Solution

On the host machine, configure an interface that is dedicated to management traffic.

Restart the host machine.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_BIND_9-x_V2R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-207537r879887_rule, STIG-ID|BIND-9X-001005, STIG-Legacy|SV-86997, STIG-Legacy|V-72373, Vuln-ID|V-207537

Plugin: Unix

Control ID: 9f0a5c4fd6ab7414dfaa352873db6d3fdbbed64e3ef6819642076b66906197f1