Re: DNSBomb

Winfried via Pdns-users <[email protected]>
Newsgroups gmane.network.dns.powerdns.user
Message-ID <[email protected]> 

Hello Kilian,

>> Are there any recommended settings for auth or dnsdist for mitigation such attacks?

>When using dnsdist before a recursor, you could apply client rate limiting
>to further protect against this and similar attacks.

see

https://dnsdist.org/guides/dynblocks.html
https://dnsdist.org/advanced/qpslimits.html

for some documentation and examples.

Winfried
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.