North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: DNS - connection limit (without any extra hardware)
On Friday 08 December 2006 14:40, you wrote: > > For this reason, I would like that a DNS could response maximum to 10 > queries per second given by every single Ip address. That may trap an email server or two. Did you consider checking what they are looking up, and lying to them about the TTL/answer "127.0.0.1 for a week" maybe better than NXDOMAIN. I use to slave "." which can save time on recursive DNS servers when they have a lot of dross to answer (assuming it is totally random dross). I suspect complex rate limiting may be nearly as expensive as providing DNS answers with Bind9.