On Sat, 12 Jun 2010, Yet Another Ninja wrote:

> On 2010-06-12 15:20, Andy Dills wrote:
> > 300,000 queries per day...per server? per CIDR? What is the delimiter?
> > 
> > Because there is certainly no single IP generating 300,000 queries per day.
> 
> That is probably your problem... use a central DNS resolver and your query
> count will instantly decrease
> 
> I bet you're querying from:
> 
> 216.127.136.200 dns02.xecu.net
> 216.127.136.247 mail-out07.xecu.net
> 216.127.136.242 mail-out02.xecu.net
> 216.127.136.246 mail-out06.xecu.net
> 216.127.136.196 mg6.xecu.net
> 216.127.136.241 mail-out01.xecu.net
> 216.127.136.245 mail-out05.xecu.net
> 216.127.136.243 mail-out03.xecu.net
> 216.127.136.244 mail-out04.xecu.net

Those and a few others.

That's why I'm asking how the limits are designed. In the past I had 
problems a certain other blacklist wanting money. We were using a central 
resolver. Their thresholds were based on queries per IP, not network.

Using a central resolver put us over their threshold. Distributing out to 
the individual servers put us under their threshold. I pointed out the 
silliness of this, as it actually increased overall traffic, but they 
weren't interested in my opinion, just my money. I would prefer to just 
rsync the data, resolve it locally and save everybody the hassle. But 
nooooo, that costs even more! Because remember, this isn't about defraying 
costs (reasonable), this is about generating revenue (reasonable, but not 
for a default-enabled option in free software).

I really just wish the various policies of the pseudo-free blacklists were 
all well-documented, so that sites can evaluate how best to conform, or if 
not, how to disable queries.

But then again, if it's well documented, they don't get a chance to 
generate sales leads!

Andy

---
Andy Dills
Xecunet, Inc.
www.xecu.net
301-682-9972
---

Reply via email to