Hi,
We've been seeing a huge increase in 'denied queries' against a couple of
Bind servers we look after (Bind 9.16.9) - these are currently logged as:
"
Nov 30 00:00:00 client @0xXXXXX X.X.X.X#48536 (.): query (cache) './ANY/IN'
denied
"
This appears like it might be someone trying (unsuccessfully) to use us as
an amplifier / reflector.
We've got Bind's statistics file setup - but I can't see there's any entry
for these "denied" queries? - As we'd really like to monitor this.
If anyone knows what stat these turn up in the statistics file (if at all?)
Thanks,
-Karl
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
