How to test BIND version running on DNS server?

BIND, or Berkley Internet Name Domain, is an Internet naming system used for DNS, which allows you to find the sites you are looking for. BIND contains entries for DNS names, so for example, if you type www.bla.com into your browser, the record tells your browser at what IP address to find the site. If you need to test BIND version running on DNS server, you can use next commands:

Windows

nslookup -q=txt -class=CHAOS version.bind 192.168.51.250

Linux

#dig -t txt -c chaos VERSION.BIND @192.168.51.250

After this, you should get next answers

Windows

Server:  my.server.net
Address:  192.168.51.250
 
version.bind    text =
 
        "9.3.4-P1"
version.bind    nameserver = version.bind

The Linux users will have more details about server

[root@server ~]# dig -t txt -c chaos VERSION.BIND @192.168.51.250
 
; <<>> DiG 9.3.4-P1 <<>> -t txt -c chaos VERSION.BIND @192.168.51.250
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44906
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
 
;; QUESTION SECTION:
;VERSION.BIND.                  CH      TXT
 
;; ANSWER SECTION:
VERSION.BIND.           0       CH      TXT     "9.3.4-P1"
 
;; AUTHORITY SECTION:
VERSION.BIND.           0       CH      NS      VERSION.BIND.
 
;; Query time: 54 msec
;; SERVER: 192.168.51.250#53(192.168.51.250)
;; WHEN: Mon Mar 23 20:09:57 2009
;; MSG SIZE  rcvd: 65

To hide your version of bind, add the following value to named.conf (now the commands shown above won’t return Bind version)

options {
.....
version "[SECURED]";
};

Save named.conf and restarted named.

Remember the fact that Bind is the most popular Internet naming system but not the only one…

Leave a Reply

Your email address will not be published. Required fields are marked *