For DNS servers that are used only for internal client queries, configure firewalls to block connections from external hosts to those DNS servers.

• 为只用于内部客户机查询的DNS服务器，配置防火墙阻塞来自外部主机对这台DNS服务器的连接。