PCI compliance - Setting BIND to no recursion, cURL can't access external sites
Posted
by
Exit
on Server Fault
See other posts from Server Fault
or by Exit
Published on 2012-10-17T02:52:45Z
Indexed on
2012/10/17
5:08 UTC
Read the original article
Hit count: 455
I was running a PCI scan and was following direction to change the BIND options from:
// recursion no;
allow-recursion { trusted;};
allow-notify { trusted;};
allow-transfer { trusted;};
to:
recursion no;
allow-recursion { none;};
allow-notify { trusted;};
allow-transfer { none;};
The end result was that cURL operations stopped being able to access external sites.
I realize that not everything will be 100% for PCI compliance, but can someone explain if there is a way to balance this for both PCI compliance and function?
© Server Fault or respective owner
