DNS Security
The only secure version of BIND is version 9.
Source verification is not possible on earlier versions of BIND, so anyone on the net can pretend to be you, or pretend to be someone you trust.
Use only BIND version 9 and learn about DNSSEC. Be certain your name service is installed and maintained by a professional certified (CISSP) by the International Information Systems Security Certification Consortium (ISC)2.
Need help establishing and certifying the security of your system policies? Obtain a security assessment of your system by a certified CISSP - CISM professional.
