Re: DNSBomb

Kilian Ries via Pdns-users <[email protected]> Wed, 5 Jun 2024 15:03:20 +0000

Newsgroups	gmane.network.dns.powerdns.user
Message-ID	<[email protected]>

@winfried @otto


thanks for your feedback ;)


Regards,

Kilian

________________________________
Von: Pdns-users <[email protected]> im Auftrag von Winfried via Pdns-users <[email protected]>
Gesendet: Montag, 3. Juni 2024 19:34:56
An: All about using and deploying powerdns
Cc: Winfried
Betreff: Re: [Pdns-users] DNSBomb



Hello Kilian,

>> Are there any recommended settings for auth or dnsdist for mitigation such attacks?

>When using dnsdist before a recursor, you could apply client rate limiting
>to further protect against this and similar attacks.

see

https://dnsdist.org/guides/dynblocks.html
https://dnsdist.org/advanced/qpslimits.html

for some documentation and examples.

Winfried
_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users

_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users