Configuration: Open DNS Recursive Resolver¶

Identifier: dns_open_recursive_resolver

Scanner Support¶

Description¶

DNS resolvers that answer recursive queries from the internet can be abused for traffic amplification and cache poisoning attacks.

How we test: We send recursive queries from an external vantage point and report the issue when the resolver answers queries for unrelated domains.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  dns_open_recursive_resolver:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.