Hide DNS Software Version on Sentora 1.0.3

[wormsunited]

Hi there,

It seems i am not able to Hide the Hide DNS Software Version in Sentora using named.conf on Bind. I added successfully the entry's as follows:

PHP Code:

// /etc/named.conf
options {
  // Hide bind version
  version "unknown";
}; 


Then i restarted the service:

PHP Code:

service named restart 


All was ok i checked the version too using this code:

PHP Code:

dig +short @ns1.example.com version.bind txt chaos 


In this case i got a return value of "unknown", problem is that it does not hide it. Now, this is a security problem since a new vulnerability maybe can be found in DNS software and script kiddies are scanning the Internet to exploit unpatched systems.

It's a best practice to hide software version on your DNS servers, although this is not a real protection it just makes a little harder to find your servers via scanning.

Any ideas why this is not working?
Thanks in advance

[TGates]

I haven't tried it yet, but will look into it this week.

---

Just tried the dig command and mine already says 'Hidden'

---

After more investigation, it does not seem possible to hide it 100%

After the suggested changes above, they all end with something like: "As usual, you can use fpdns to find out version number."

[wormsunited]

Hi there i managed to do it under some of my servers, but for some reason that i cannot explain it does not work with fresh Sentora Installations. I mean i did made it for some of them, but on some others i could not.

My guess... I think the issue also depends on our registrar provider since i am using 2 companies, Godaddy and Name. At Godaddy i have the versions hidden, but on Name i do not. Maybe a request for the registrar can fix this issue? I will make a few more checks on this matter too and i will keep you all posted very soon.

Although the code is correct and the steps too.

Code:

Notice:

There is 2 files at Sentora that needs to be changed, not just one. the named.conf exists in two
places, so its a good idea to modify both.