On a BIND 9.x server in a split DNS configuration, where separate name servers are used between the external and internal networks, the internal name server must be configured to not be reachable from outside resolvers.

No profile (default benchmark)

I - Mission Critical Classified

I - Mission Critical Public

I - Mission Critical Sensitive

II - Mission Support Classified

II - Mission Support Public

II - Mission Support Sensitive

III - Administrative Classified

III - Administrative Public

III - Administrative Sensitive