On Mon, 23 Jul 2012, Stephane Bortzmeyer wrote:
The operators of F-root use this on their FreeBSD machines to
rate-limit per source IP:
add pipe 1 udp from any to any 53 in
pipe 1 config mask src-ip 0xffffffff buckets 1024 bw 400Kbit/s queue 3
add pipe 2 tcp from any to any 53 in
pipe 2 config mask src-ip 0xffffffff buckets 1024 bw 100Kbit/s queue 3
But that will totally ruin djb's claim that dnssec is the cause of the
internet melt down!
Paul
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
