ghe:
> On 8/21/19 1:21 PM, Wietse Venema wrote:
>
> > If you can be more specific about "blackHats hitting in my DNS from
> > cloud9" (like, what kinds of traffic are you referring to?), then
> > maybe I can provide you with actionable information.
>
> They just send to UDP 53 and quit. What I want to do is deny the packet
> in my router, but always allow the important IP(s).
UDP/53 is DNS. There will be a hit each time there is email for you
from a Postfix mailing list, with one request that has type MX, and
one or more requests that have type A or AAAA.
Wietse
