DNS Server Protections

What can I do here?

Use this window to protect the DNS Server from cache poisoning.

Getting Here - Object Explorer > New > Host > Servers > Mail Server > Protections

Cache Poisoning

Cache Poisoning occurs when DNS caches receive mapping information that was deliberately altered from a remote name server. The DNS server caches the incorrect information and sends it out as the requested information. As a result, email messages and URL addresses can be redirected and the information sent by a user can be captured and corrupted.

Cache Poisoning Options

• Scramble source port and session id - Scrambles the source port and query ID number of each DNS request for specific name servers
• Drop inbound requests for external domains - Prevents unauthorized inbound queries whose content is not a part of the name servers predefined zone.

Note - Enforcement of these settings depends on the profile that protects the server.