BIND-9X-001080 – A BIND 9.x implementation configured as a caching name server must restrict recursive queries to only the IP addresses and IP address ranges of known supported clients – allow-query
Details Any host that can query a resolving name server has the potential to poison the servers name cache or...