[dns-operations] Abnormal activity fron chinanet?

Stephan Schuchardt ssh at ashampoo.com
Tue Dec 6 16:06:16 UTC 2011


We are using an modified filter in fail2ban to minimize that stupid 
traffic. When a clientquery is larger then 30 requests in 120 seconds, 
the client is automatically blocked for 300 seconds with IPTABLES.

It runs very stable.

-- 


MfG/Regards


	

*Stephan Schuchardt*
System Administrator
*Ashampoo GmbH & Co. KG* | HRA 3618 Oldenburg (Oldb.)
Felix-Wankel-Straße 16 | 26125 Oldenburg/Germany
Fon: +49 441 93379-0 | Fax: +49 441 93379-79
_www.ashampoo.com_

*Vertreten durch | Represented by:*
HILCHNER & LESANI GmbH | HRB 4490 Oldenburg (Oldb.)
Felix-Wankel-Straße 16 | 26125 Oldenburg/Germany
*Geschäftsführung | Executive board:*
Rolf Hilchner & Heinz-Wilhelm Bogena

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20111206/f01c90ed/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 7684 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20111206/f01c90ed/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6117 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20111206/f01c90ed/attachment.bin>


More information about the dns-operations mailing list