-
Notifications
You must be signed in to change notification settings - Fork 2
CISecurity
Egbert edited this page Apr 20, 2022
·
1 revision
In the easy-admin/100-cisecurity subdirectory, there are a number of remediation scripts and a few passive checking tools.
One is 500-cis-dns-bind-dirs.sh.
The original design was to comply with CISecurity recommendation. But later expanded to check for default settings of Debian/Devuan and Redhat/Fedora/CentOS class.
UPDATE: Also, there is a Maximum Security setting for ISC Bind9 that I drafted.
More on this here in CISecurity - ISC Bind9 DNS.