Re: How to throttle misconfigured clients?

2020-03-03 Thread Tony Finch
von Dein, Thomas wrote: > > we're seeing a lot of malformed dns queries to our recursive nameservers > like these: [snip queries for notification. / antivirusix. / kubeinspect. / organization. / history. / go-kms. ] > Obviously these clients (there are many) are misconfigured in some weird >

RE: How to throttle misconfigured clients?

2020-03-03 Thread Gabriel Fornaeus
f von Dein, Thomas Sent: 03 March 2020 13:09 To: bind-users@lists.isc.org Subject: How to throttle misconfigured clients? Hello, we're seeing a lot of malformed dns queries to our recursive nameservers like these: 06:38:32.733678 IP client.59003 > nameserver2.53: 21974+ ? notification

How to throttle misconfigured clients?

2020-03-03 Thread von Dein, Thomas
Hello, we're seeing a lot of malformed dns queries to our recursive nameservers like these: 06:38:32.733678 IP client.59003 > nameserver2.53: 21974+ ? notification. (30) 06:38:32.734079 IP nameserver2.53 > client.59003: 21974 NXDomain 0/1/0 (105) 06:38:33.216732 IP client.59003 >