PCI compliance - Setting BIND to no recursion, cURL can't access external sites
- by Exit
I was running a PCI scan and was following direction to change the BIND options from:
// recursion no;
allow-recursion { trusted;};
allow-notify { trusted;};
allow-transfer { trusted;};
to:
recursion no;
allow-recursion { none;};
allow-notify { trusted;};
allow-transfer { none;};
The end result was that cURL operations stopped being able to access external sites.
I realize that not everything will be 100% for PCI compliance, but can someone explain if there is a way to balance this for both PCI compliance and function?
