+APP.3.6.A16 Integrating a DNS Server into a “P-A-P” Structure (S)

APP.3.6.A16 Integrating a DNS Server into a “P-A-P” Structure (S)

DNS servers SHOULD be integrated into a “packet filter—application level gateway—packet filter” (P-A-P) structure (see also NET.1.1 Network Architecture and Design). In the process, the advertising DNS server SHOULD be placed in a demilitarised zone (DMZ) of the outer packet filter. The resolving DNS server SHOULD be installed in a DMZ of the internal packet filter.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages