Common tasks on DNS with BIND using BASH

---

1. Run separate authoritative and recursive DNS servers

2. Enable Debug Logging

3. Use CNAME Records for Alias (Instead of A Record)

4. DNS Order on Domain Controllers

5. Domain-joined Computers Should Only Use Internal DNS Servers

6. Use Anycast and Load-balancing

7. Implement Unified change management

8. Enable DNS Logging

9. Lock DNS Cache

10. Filter DNS Requests to Block Malicious Domains

11. Firewalls should be hardened to close unneeded ports

12. Allow queries only for your managed domains

13. Configure Access Control Lists

14. DNSSEC Deployment

15. DNSSEC Security Components Automation

16. Enable DNSSEC to ensure that DNS responses are digitally signed

17. Validate DNS Data Integrity with DNSSEC

---

Disclaimer

DISCLAIMER: The information and code provided here are intended for educational and informational purposes only. The user assumes full responsibility for the use of this information and code. The provider of this information and code makes no representations or warranties, express or implied, about the completeness, accuracy, reliability, suitability, or availability of the information and code provided. Any reliance you place on such information and any use of this code is therefore strictly at your own risk. In no event will the provider be liable for any loss or damage including without limitation, indirect or consequential loss or damage, arising out of, or in connection with, the use of this information and code.