Re: Question about: "rate-limit: stop limiting responses to 1.1.1.0/24 for www.example.com"

2018-01-04 Thread Tony Finch
Tom wrote: > Why does this logentry only appears about 60-65 seconds later, after > I've stopped the "test"-attack (confirmed multiple times..)? There's a hardcoded cleanup timeout of 60 seconds. The extra is (I think) due to the time needed to make the token bucket positive. Tony. -- f.anthon

Re: Recommended values for a zone

2018-01-04 Thread Bob Harold
On Wed, Jan 3, 2018 at 5:58 PM, Mik J wrote: > Thank you Bob for your answer. > I continued to search and saw rfc1912 page 4 > It's much higher than I first thought > > > > Le mercredi 3 janvier 2018 à 20:05:57 UTC+1, Bob Harold < > rharo...@umich.edu> a écrit : > > > > On Wed, Jan 3, 2018 at 1:5

Question about: "rate-limit: stop limiting responses to 1.1.1.0/24 for www.example.com"

2018-01-04 Thread Tom
Hi list I'm testing rate-limits (BIND 9.11.2) and I'm unsure, how I've to understand the following "stop-limiting"-log-entry: 1) 04-Jan-2018 15:09:10.852 rate-limit: info: limit responses to 1.1.1.0/24 for www.example.com IN A (7ae73d9b) 2) 04-Jan-2018 15:09:10.852 rate-limit: info: client