Re: [dnsdist] Matching DNS server IP in request

2024-05-21 Thread Aleš Rygl via dnsdist
    I would need to virtualy split a single dnsdist instance in the the way, that clients sendig request to a particular IP od DNS dnsdist (listening on multiple IPs) are sent to a dedicated pool. I could start another dnsdist process bound to the secondary IP on the server but I think there

[dnsdist] Matching DNS server IP in request

2024-05-17 Thread Aleš Rygl via dnsdist
Hello,     I would need to virtualy split a single dnsdist instance in the the way, that clients sendig request to a particular IP od DNS dnsdist (listening on multiple IPs) are sent to a dedicated pool. I could start another dnsdist process bound to the secondary IP on the server but I

Re: [dnsdist] rules to block dns tunneling trafic from iodine, dnscat2, ...

2023-10-29 Thread Aleš Rygl via dnsdist
Hi Denis, Thanks a lot for sharing your rules! See some comments below. On 05. 07. 23 10:19, Denis MACHARD via dnsdist wrote: -- Update the dynamic blocks with refused reply by default setDynBlocksAction(DNSAction.Refused) I was using DNSAction.Refused as well, later on I moved to

Re: [dnsdist] dnsdist 1.7.4 Debian Bullseye vs 1.8.4 Bullseye

2023-10-09 Thread Aleš Rygl via dnsdist
Hi On 05/10/2023 10:41, Aleš Rygl via dnsdist wrote: Thanks for your response. After some deep documentation reading and config tweaking I am nearly on the previous values regarding CPU load, apart from latency, which is still higher (1.3ms -> 2.3ms). I suspect a different

Re: [dnsdist] dnsdist 1.7.4 Debian Bullseye vs 1.8.4 Bullseye

2023-10-05 Thread Aleš Rygl via dnsdist
Hi Remi, On 02. 10. 23 13:53, Remi Gacogne via dnsdist wrote: Hi Ales, On 25/09/2023 16:09, Aleš Rygl via dnsdist wrote:     I would to kindly ask for help or and advice. I have just upgraded one of our dnsdist instances from 1.7.4 do 1.8.4 together with OS upgrade (Debian 11.7 to 12.1

Re: [dnsdist] dnsdist 1.7.4 Debian Bullseye vs 1.8.4 Bullseye

2023-09-25 Thread Aleš Rygl via dnsdist
Ah, I am sorry, the subject should be  1.7.4 Debian Bullseye vs 1.8.1 Bookworm. I am running 1.8.1 on Bookworm... Ales On 25. 09. 23 16:01, Aleš Rygl via dnsdist wrote: Hello,     I would to kindly ask for help or and advice. I have just upgraded one of our dnsdist instances from 1.7.4 do

[dnsdist] dnsdist 1.7.4 Debian Bullseye vs 1.8.4 Bullseye

2023-09-25 Thread Aleš Rygl via dnsdist
Hello,     I would to kindly ask for help or and advice. I have just upgraded one of our dnsdist instances from 1.7.4 do 1.8.4 together with OS upgrade (Debian 11.7 to 12.1). Everything works fine, no issues observed apart some deprecated config references. What is a big surprise to me is

Re: [dnsdist] dnsdist 1.5.1 on Debian 10.8: snmpd socket and privileges

2021-02-23 Thread Aleš Rygl via dnsdist
On 23. 02. 21 20:29, Mark Moseley via dnsdist wrote: On Tue, Feb 23, 2021 at 7:49 AM Remi Gacogne via dnsdist mailto:dnsdist@mailman.powerdns.com>> wrote: Hi Aleš, On 2/23/21 4:35 PM, Aleš Rygl via dnsdist wrote: > My idea was that changing mode of agentx directory abo

[dnsdist] dnsdist 1.5.1 on Debian 10.8: snmpd socket and privileges

2021-02-23 Thread Aleš Rygl via dnsdist
Hello, I am struggling a bit on dnsdist after upgrade to from 1.4.0 to 1.5.1. I am using Debian 10.8 and dnsdist with SNMP support enabled. It looks like dnsdist systemd unit file forces dnsdist to drop privileges to _dnsdist user and _dnsdist group in 1.5.1: [Service]