Re: [Pdns-users] Handling packet flood from one client.

[Ton van Rosmalen]

Leen Besselink schreef: On Tue, Jan 27, 2009 at 10:00:18AM -0800, Augie Schwer wrote: Obviously; but that's being reactive; I was looking for something more proactive. --Augie I've not tested it, but I understand the u32 option is available on Debian/Linux for example: http://www.stupendous.net/archives/2009/01/24/dropping-spurious-nsin-recursive-queries/ That might do what you want. How about rate limiting using iptables? You'd have to determine some sort general usage rule or manually add ip addresses to he list that's limited. Regards, Ton

_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users