Outbound Requests

•	Outbound DNS Requests

•

Send outbound DNS and zone transfer requests via
Specify which IP versions (IPv4/IPv6) and from which local IP addresses outbound requests should be sent.
It can be useful to select a specific local IP address for secondary DNS servers with multiple IP addresses (multi-homed) if the primary DNS server only allows zone transfers from a specific IP address.
When both IPv4 and IPv6 are enabled, you can also enabled "Prefer IPv6 servers" to have the server attempt to resolve DNS over IPv6 whenever possible.

•

Send outbound DNS requests from port number
Specify if Simple DNS Plus should use a new random port number for each outbound request, or send all outbound requests from the same port number.
Using random port numbers helps protect against DNS spoofing attacks. For details see How to secure you server / DNS spoofing.
Using a fixed port number is not recommend unless the DNS server is not offering recursion or it is forwarding to another secure DNS server for all domains.

•	When receiving response

•

Ignore responses not coming from the IP address that request was sent to
Enabling this option helps protect against DNS spoofing attacks. See How to secure your server / DNS spoofing.
This is only an option because some multi-homed DNS servers may not respond from the same IP address as the DNS request was sent to, making it is impossible to resolve domains hosted by such a DNS server with this option enabled. This is however pretty rare and we generally recommend enabling this option.

•

Ignore responses which do not echo the request question section
Enabling this option helps protect against DNS spoofing attacks. See How to secure your server / DNS spoofing.
This is only an option because older DNS servers/forwarders/devices may not include the question in the response as this was not originally an RFC requirement. This is however pretty rare and we generally recommend enabling this option.