Re: Stopping ddos

2022-08-03 Thread Nathan Ollerenshaw via bind-users
On 8/2/22 3:29 PM, Robert Moskowitz wrote: My clients use my internal view.  My external view has:     match-clients        { any; };     match-destinations    { any; };     allow-query        { any; };     allow-query-cache    { localhost; };     recursion no; it's been a while but I do

Re: Stopping ddos

2022-08-02 Thread Nathan Ollerenshaw via bind-users
On 8/2/22 1:02 PM, Robert Moskowitz wrote: Recently I have been having problems with my server not responding to my requests.  I thought it was all sorts of issues, but I finally looked at the logs and: Aug  2 15:47:19 onlo named[6155]: client @0xaa3cad80 114.29.194.4#11205 (.): view external

Re: denied NS/IN

2009-01-23 Thread Nathan Ollerenshaw
On 24/01/2009, at 9:57 AM, Mark Andrews wrote: You you don't also have blessed silence on the counters on this rule there is still a problem and you should be complaining to whoever is sending the packets to you. This just stops the amplification it doesn't clea

Re: denied NS/IN

2009-01-23 Thread Nathan Ollerenshaw
On 21/01/2009, at 10:40 AM, Scott Haneda wrote: Hello, looking at my logs today, I am getting hammered with these: 20-Jan-2009 15:39:06.284 security: info: client 66.230.160.1#48517: query (cache) './NS/IN' denied 20-Jan-2009 15:39:06.790 security: info: client 66.230.128.15#31593: query (ca

Avoiding being used as DDoS reflector.

2009-01-18 Thread Nathan Ollerenshaw
n option that could rate limit responses based on type; so you could specify that a "REFUSED" reply will only be sent to a given host once per hour, or something like that. Any ideas? Anyone facing this same problem found a solution? I'd be glad to hear it :) -- Nathan Oll