I have taken over the responsibility for an old system. I am planning to get new hardware and decommission this exciting server very soon. In the mean time my hosting-provider is warning me that I am running a dns-server that responds to everyone and can be used in a DNS Amplification Attack.
I understand that the correct option to use in named.conf is "allow-query-cache", the problem is that this option was introduced in BIND 9.4, I am running 9.3.6. What options do I have? If I understand correctly the "allow-query" option will be too restrictive, as I am hosting zones on the dns-server.
I really don’t want to spend too much time fixing this old server as it is headed for the junkyard. Advice?