he traffic is and getting
a better idea of who is responsible for generating it and why.
In my opinion, in the absence of knowing what the problem is,
experimenting with stuff like rate limiting or blocking is unlikely
to solve the problem.
Regards,
Peter Coghlan.
--
Visit https://lists.isc.org/mail
here in dealing with the subject
of malicious, bogus queries etc.
Regards,
Peter Coghlan.
>
> --
>
> Hal King - h...@utk.edu
> Systems Administrator
> Office of Information Technology
> Shared Services
>
> The University of Tennessee
> 103c5 Kingston Pike Buildin
ld be
interested to know what the experts think bind might have made of this
traffic had it not been filtered out. I have included some of the more
usual probes before and after the more interesting traffic for context.
Regards,
Peter Coghlan.
09:50:12.36 207.244.251.243.41020 > 192.168.80.24.53:
to continue as it has been but at
least it may be clearer to them as to why they are in the situation they
are in.
Regards,
Peter Coghlan
>
> Ondrej
> --
> Ondřej Surý (He/Him)
> ond...@isc.org
>
>> On 4. 6. 2021, at 20:37, Peter Coghlan wrote:
>>
>> What I fi
in this arena, then shouldn't this be stated
clearly instead of also declaring that it is highly portable?
Regards,
Peter Coghlan.
>
> Do you understand how ironic is for you to complain about “subscription is
> not going to happen” while **every** email on the mailing list
eep on trying.
The most recent one I've seen was three days ago but there could have been
more since then that hit the packet filters when I wasn't paying attention.
Regards,
Peter Coghlan.
___
Please visit https://lists.isc.org/mailman/l
Tony Finch wrote:
>Peter Coghlan wrote:
>> Instead, isn't it the case that bind knows what domains it is authoritative
>> for (or which ones it is supposed to be authoritative for) and bind is
>> therefore in the ideal position to know which queries are abusive and wh
Tony Finch wrote:
> Peter Coghlan wrote:
> >
> > I have a nameserver which is authoritative for three or four domain names.
> > It receives around 1000 queries per day that could be regarded as plausably
> > legitimate. It receives around ten times that number of absi
hat many nameserver admins probably would not even
notice it unless they had query logging or query-error logging turned
on and checked the logs.
Regards,
Peter Coghlan.
--Boundary_(ID_/cANmbMgveXk/KlZF+xdIQ)--
___
Please visit https://lists.isc.org/mailman/l
9 matches
Mail list logo
