[HowTo] Make ispCP more Secure !

[gutek]

i think that BIND securing is a little wired in this how-to. I recommend do it that way:

in /etc/bind/named.conf add

Code:

allow-query {127.0.0.1; zzz.zzz.zzz.zzz;};
allow-transfer {xxx.xxx.xxx.xxx;};

instead of

Code:

recursion no;

zzz.zzz.zzz.zzz your public ip
xxx.xxx.xxx.xxx your secondary dns

After this change you can use localhost as DNS cache server.

Am I right?