External port scans show that the DNS port (tcp/udp/53) is exposed to the Internet.

This is not required and represents a potential security risk.

Our server configuration needs to be updated so that this is locked down.