[dns-operations] annoying DDoS attack on ns0.rfc1035.com

Jan-Piet Mens jpmens.dns at gmail.com
Sun Jun 10 08:47:56 UTC 2012


> can i interest you in an experimental (thus far) patch to implement
> per-{client,response} rate limiting in bind?

Tony Finch has been working on  query-rate limiting for BIND [1]:

> This version of BIND has been modified by Tony Finch at the University
> of Cambridge Computing Service to add per-client query rate limiting.

Readme [2].

        -JP


[1] https://github.com/fanf2/bind-9
[2]: https://github.com/fanf2/bind-9/blob/master/doc/misc/ratelimiting



More information about the dns-operations mailing list