+APP.3.6.A16 Integrating a DNS Server into a “P-A-P” Structure (S)

APP.3.6.A16 Integrating a DNS Server into a “P-A-P” Structure (S)

DNS servers SHOULD be integrated into a “packet filter—application level gateway—packet filter” (P-A-P) structure (see also NET.1.1 Network Architecture and Design). In the process, the advertising DNS server SHOULD be placed in a demilitarised zone (DMZ) of the outer packet filter. The resolving DNS server SHOULD be installed in a DMZ of the internal packet filter.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages