Re: rate-limit and Facebook IP's

2014-07-01 Thread Reindl Harald
Am 01.07.2014 17:27, schrieb Carl Byington: > On Tue, 2014-07-01 at 16:45 +0200, Reindl Harald wrote: >> 30-Jun-2014 13:24:31.717 rate-limit: limit NODATA responses to >> 69.171.248.0/24 for ns1.thelounge.net IN (1abd134b) > > I also see the rate limiting kicking in for facebook ranges. I should

Re: rate-limit and Facebook IP's

2014-07-01 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 2014-07-01 at 16:45 +0200, Reindl Harald wrote: > 30-Jun-2014 13:24:31.717 rate-limit: limit NODATA responses to > 69.171.248.0/24 for ns1.thelounge.net IN (1abd134b) I also see the rate limiting kicking in for facebook ranges. I should setup

Re: rate-limit and Facebook IP's

2014-07-01 Thread Reindl Harald
that's really interesting, also on the firewall rate-limiting new UDP connections to 30 per 2 seconds and client IP also catchs all day long several facebook IP's on both nameservers Firewall Rate-Control: SRC=69.171.247.119 DST=85.124.176.242 LEN=74 TOS=0x00 PREC=0x00 TTL=80 ID=65378 PROTO=UDP S

rate-limit and Facebook IP's

2014-06-30 Thread Reindl Harald
am i the only one facing all day long serveral facebook networks hit RRL on both nameservers? for me there are only two options to explain that: * facebook is too dumb to cache responses (TTL a day) * that's part of a well distributed amplification trying not make much noise on the single involv