Hide Authoritative DNS Master Server from External.

[#1]

Hi,

Our Company has one Authoritative server    auth.abc123.com.sg

our secondary dns servers are 2 ISP DNS servers.

on our zone records, we see these 2 ISP DNS servers NS record + our auth.abc.com.sg NS record also.  - noticed stealth is not enabled for our same Master server . .

Issue is - now from external our authoritative server is visible and getting lot of queries .

We want to hide our auth server  from external and expect queries from only 2 ISP secondary DNS servers .

Please advise how to fix this on the Infoblox. .

[#2]

Also like to know the impact when enable stealth on authoritative server   -will it reboot the system or just restart the service ?

[#3 · Accepted solution]

Hi,

so you are enabling transferzone with configuration of infoblox primary and 2 ISP as external secondary right? then you already registered that 2 ISP DNS in the name server list.

Now you just need to check on stealth option from infoblox (your infoblox appliance running extenal ns), then when u query to the domain qtype NS, then it will only show the 2 ISP servers only.

thanks

[#4]

Thanks a lot.