[CLOUDSTACK-5494] the dns resolver servers on the VRs are open to the world

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Duplicate
• Affects Version/s: 4.2.0, 4.3.0
• Fix Version/s: Future
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: security
• Assignee: Jayapal
• Reporter: Wei Zhou
• Created: 13/Dec/13 12:22
• Updated: 06/Feb/15 10:03
• Resolved: 12/Dec/14 10:26

Description

Currently the port 53 (tcp and udp) on virtual routers are open, so everyone on the internet can visit the dns service on virtual routers. This may cause overload and security issue.

Issue Links

• is duplicated by: CLOUDSTACK-6432 Prevent VR from response to DNS request from outside of network