+APP.3.6.A16 Integrating a DNS Server into a “P-A-P” Structure (S)

APP.3.6.A16 Integrating a DNS Server into a “P-A-P” Structure (S)

DNS servers SHOULD be integrated into a “packet filter—application level gateway—packet filter” (P-A-P) structure (see also NET.1.1 Network Architecture and Design). In the process, the advertising DNS server SHOULD be placed in a demilitarised zone (DMZ) of the outer packet filter. The resolving DNS server SHOULD be installed in a DMZ of the internal packet filter.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages