Hi Brian,

On 8/29/19 3:50 PM, Brian Sullivan wrote:
> When I use a dynamic rule block and it gets triggered I see a log
> message as follows:
> *dnsdist[15542]: Inserting dynamic block for 10.51.76.142 for 10
> seconds: Exceeded Query Rate*
> 
> Is there a way to truncate the IP Address? It is considered PII and we
> are required to not log any PII.

I'm afraid we don't have any way to do that at the moment. I just opened
a pull request [1] that makes it possible to not have anything logged at
all when a new dynamic block is inserted, but that's an all-or-nothing
option.

Please open a feature request on GH if you would like to have the
truncation feature implemented.

[1]: https://github.com/PowerDNS/pdns/pull/8252

Best regards,
-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
dnsdist mailing list
dnsdist@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/dnsdist

Reply via email to