Hello,

To correct "Open DNS servers' showing in RED in http://dnsreport.com then do following,

Edit the /etc/named.conf file like this:

right after the controls statements add an acl statement like this:

acl "trusted" {
1.2.3.4;1.2.3.4;1.2.3.4;
};

In the acl statement the ip addresses stand for trusted addresses like your nameserver ips or any additional ips that need to have permission for zonetransfers and recursive answers. This could be for example your client ip for testing.

Then go further down into the options statement and add this in a line right after the query-source address line so it looks like this:


// query-source address * port 53;
version "not currently available";
allow-recursion { trusted; };
allow-notify { trusted; };
allow-transfer { trusted; };
};

Restart named and it's gone