Port 53 is disabled by default

更新时间:
复制 MD 格式

Overview

According to the Telecommunications Regulations of the People's Republic of China and the Administrative Measures on Telecommunications Business Licensing, offering a public recursive resolution service requires a Value-added Telecommunication Business License for the B26-1 Internet domain name resolution service. Therefore, to use an Alibaba Cloud server for this purpose, you must provide this license to open port 53.

To get help building your own recursive DNS, join our DingTalk group: 149280013275.

FAQ

  1. What is an Internet domain name resolution service?

    An Internet domain name resolution service uses servers and software to translate domain names into IP addresses. This service includes two types: authoritative resolution service and recursive resolution service. To provide a recursive resolution service, you must obtain a Value-added Telecommunication Business License for the Internet domain name resolution service.

    An authoritative resolution service provides domain name resolution for the root domain name, top-level domain names, and other domain levels.

    A recursive resolution service resolves domain names by querying a local cache or an authoritative resolution service.

  2. What is server port 53?

    Port 53 is the service port for the Domain Name System (DNS). It is primarily used to resolve Internet domain names.

  3. How do I apply for the "B26-1 Internet domain name resolution service" Value-added Telecommunication Business License?

    Consult the provincial communications administration where your business entity is located for specific application procedures.

  4. Can I open port 53 for an authoritative resolution service if I do not offer a recursive resolution service?

    Yes. You do not need a license to provide an authoritative resolution service.

  5. How can I use a recursive resolution service for internal purposes only, without offering it to the public?

    You can open port 53, but you must implement technical measures to restrict the service to within a local area network.

  6. I accidentally opened port 53 but am not providing a public recursive or authoritative resolution service. What should I do?

    Please close port 53 and improve your network security.

  7. If I provide a recursive resolution service without the required Value-added Telecommunication Business License, will Alibaba Cloud close port 53 on my server?

    According to the Administrative Measures on Telecommunications Business Licensing, Alibaba Cloud is prohibited from providing access service to any unlicensed entity or individual. Therefore, Alibaba Cloud is legally obligated to close port 53 on your server.

  8. Can an individual provide an Internet domain name resolution service?

    No. Individuals cannot provide this service. You must register as a business entity and obtain the required Value-added Telecommunication Business License to offer an Internet domain name resolution service.

Procedure

  1. Log in to the Security Control console.

  2. Enter your business entity (company) name and select your business type. Note: If you plan to provide a recursive resolution service, ensure that the business entity name you enter matches the company name on your license.

    Upload the business license of the business entity and the Value-added Telecommunication Business License. Ensure the license's approved business scope includes "Internet domain name resolution service." Then, click Submit to complete the verification.

  3. Click Submit and wait for approval.

Relevant policies and regulations

Administrative Measures on Telecommunications Business Licensing

Article 46: Anyone who violates the provisions of Article 16, Paragraph 1, or Article 28, Paragraph 1 of these Measures by operating a telecommunications business without authorization or beyond the licensed scope shall be punished in accordance with Article 69 of the Telecommunications Regulations of the People's Republic of China. In serious cases where a business suspension is ordered, the entity will be added directly to the list of discredited telecommunications business operators.

Administrative Measures on Internet Domain Names

Article 36: Providers of domain name resolution services must comply with relevant laws, regulations, and standards; possess the necessary technical, service, and network security capabilities; implement network and information security measures; and legally record and retain domain name resolution logs, maintenance logs, and change records to ensure service quality and system security. If providing these services involves operating a telecommunications business, a license must be obtained as required by law.

Administrative Measures on Telecommunications Business Licensing

Article 24: Value-added telecommunications business operators that provide access service must comply with the following regulations: (3) They shall not provide access or billing services to any entity or individual that has not obtained a license or has not completed the required filing for non-commercial Internet information services.