Information
BIND can be configured to reuse the same source port when communicating with other DNS servers. This capability is made possible through the query-source option. It is recommended that this option not be used.
Rationale:
Enabling the query-source option will increase the probability of an attacker successfully poisoning the DNS cache.
Solution
Ensure the query-source option in not present in named.conf.