Two queries/second/process should not kill a DNS server.  A mail server with 
spam control can conservatively make dozens of calls per second.  I get more 
hits from Comcast's new bot sniffer/port scanner than that. It looks like their 
DNS servers have dual duty... resolve dns requests and search for infected PCs.

That said, if you forward a lot of lookups to an outside DNS server, you might 
be nice and insert a dns cache (for example DJB's dnscache).  Since spam bots 
tend to send LOTS of spam concurrently, it makes it that you only forward the 
request for the first one and your local cache returns results for the 
duplicate queries.

Gary
-- 
This message posted from opensolaris.org
_______________________________________________
dtrace-discuss mailing list
dtrace-discuss@opensolaris.org

Reply via email to