Steve Ladewig wrote: > Tom Eastep said the following, On 01/31/2009 08:07 PM: >> I've place my DNSDDOS action files at >> http://www.shorewall.net/pub/shorewall/contrib/DNSDDOS/. See the >> aaREADME.txt file. >> >> Shorewall-perl users should be able to use it as-is. >> >> -Tom > > I am not seeing any. > > Counters reset Sun Feb 1 12:02:03 CST 2009 > > Chain DNSDDOS (1 references) > pkts bytes target prot opt in out source > destination > 0 0 DROP all -- * * 0.0.0.0/0 > 0.0.0.0/0 STRING match "|010000010000000000000000020001|" ALGO > name bm FROM 30 TO 31 > 3482 210K ACCEPT all -- * * 0.0.0.0/0 > 0.0.0.0/0 > > Yet they are still coming. > 03-Feb-2009 09:42:46.115 client 76.9.16.171#63994: view world: query > (cache) './NS/IN' denied >
Then you will have to use Wireshark and see what the packets that you are receiving look like. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
