Secure Bind

Here are some small and important things to secure your bind name server:

All the changes will be made in the file /etc/bind/named.conf.options

• Don't allow transfer of zones (or only to the secondary nameservers): allow-transfer {}; or allow-transfer {myip1;myip2};
• Don't allow recursion (or only from localhost and the secondary nameservers): allow-recursion { localhost; myip1; myip2; };
• Don't show the version of bind: version "";

Check your settings: http://www.howismydns.com/tools.php (DNS - Zone Report)