DNS Cache Snooping vulnerabilty

[Saulo Medeiros de Araújo]

Hello to eveyone!
I trying to solve the DNS Cache Snooping vulnerabilty, detected by Nessus,
but i'm having some dificuties.

I found in my searchs some safer BIND configurations to prevent cache
snooping attacks. So i've inserted those following lines in my named.conf
file:

acl "trusted" {
    10.0.0.0/16;
    localhost;
};

And added those following lines in my named.conf.options file:

        allow-query { trusted; };
        allow-recursion { trusted; };
        allow-query-cache { trusted; };

But i'm still getting the Nessus alert. Does anyone have some ideia to solve
this problem?

This is the Nessus issue:
http://www.nessus.org/plugins/index.php?view=single&id=12217

Thanks for any help!

Best regards..