STIGQter STIGQter: STIG Summary: BIND 9.x Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 01 Jul 2026:

The BIND 9.x server implementation must have fetches-per-server enabled.

DISA Rule

SV-275937r1156959_rule

Vulnerability Number

V-275937

Group Title

SRG-APP-000516-DNS-000109

Rule Version

BIND-9X-002460

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Modify the BIND configuration file (/etc/named.conf ).

Add the fetches-per-server option to the "options" section of the configuration file.

fetches-per-server <integer> drop;

After making changes, reload or restart BIND to apply the new settings.

Check Contents

Verify fetches-per-server is enabled with an organization-defined number.

Inspect the named.conf file for the following:

options {
fetches-per-server <integer> drop ;

If fetches-per-server is not enabled and set to drop, this is a finding.

Vulnerability Number

V-275937

Documentable

False

Rule Version

BIND-9X-002460

Severity Override Guidance

Verify fetches-per-server is enabled with an organization-defined number.

Inspect the named.conf file for the following:

options {
fetches-per-server <integer> drop ;

If fetches-per-server is not enabled and set to drop, this is a finding.

Check Content Reference

M

Target Key

5687