Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 11: DNS (Domain Name System)
Configuring hosted DNS servers
Entering information
on the Advanced
Server Options
window
324
The Advanced Server Options window is used to define some of the more
advanced DNS name server options.
• Do not change these options unless you are an experienced DNS system
administrator.
• By default, the options on this window are disabled, meaning there are no
restrictions. If your organization considers this to be a security risk, you
should use these options to limit the amount of interaction this name server
has with other devices. Use your organization’s security policy as a guide.
To modify advanced server options, follow the steps below.
1 To enable the notify option, select the corresponding check box. Enabling
this option allows you to specify whether the master server will notify all
slave servers when a zone file changes. The notification indicates to the
slaves that the contents of the master have changed and a zone transfer is
necessary.
If this field is not selected, the field defaults to Yes.
2 To enable the allow-query option, select the corresponding check box.
Selecting this option affects who is able to query this name server. The
options are the following:
• If not selected, all requesters are authorized to query the name server.
This is the default.
• If selected and contains IP addresses, only the requesters defined in the
allow-query list will be authorized to query this name server. Use the
New and Delete buttons to modify this list. See “Adding an IP address”
on page 325 for details on using the New button.
Note: If you select this option, be sure to include all IP addresses that might
need to query the server, such as the heartbeat burbs’ IP addresses,
loopback addresses, etc.
3 To enable the allow-transfer option, select the corresponding check box.
Selecting this option allows you to limit who is authorized to request zone
transfers from this name server.
• If not selected, all requesters are authorized to transfer zones from the
name server. This is the default.
• If selected and no IP addresses are added, no requesters will be
authorized to transfer zones from this name server.
• If selected and contains IP addresses, only the requesters defined in the
allow-transfer list will be authorized to transfer zones from this name
server. Use the New and Delete buttons to modify this list. See “Adding
an IP address” on page 325 for details on using the New button.
4 Click OK to save your changes.