Hello,
Actually, I'm looking for a way to configure dnsmasq against DNS DoS
attack.
Fail2ban is one of the must famous service that provide this type of
filter but only for BIND services. Is there a filter working with the
dnsmasq's logs ?
Looking forward to hearing from you.
Hi,
We are using dnsmasq 2.78. We see that there are some security vulnerability
w.r.t malformed DHCP packets as explained below.
Problem 1:
A malformed dhcp discover packet can cause dhcp to be unresponsive from the
switch for a small amount of time. If this was repeated over time an attacker