lot of 'ripe.net IN ANY +ED' queries

Paul Wouters paul at cypherpunks.ca
Mon Jul 23 20:21:52 UTC 2012


On Mon, 23 Jul 2012, Stephane Bortzmeyer wrote:

> The operators of F-root use this on their FreeBSD machines to
> rate-limit per source IP:
>
> add     pipe 1          udp     from any to any 53 in
> pipe 1  config  mask src-ip 0xffffffff buckets 1024 bw 400Kbit/s queue 3
> add     pipe 2          tcp     from any to any 53 in
> pipe 2  config  mask src-ip 0xffffffff buckets 1024 bw 100Kbit/s queue 3

But that will totally ruin djb's claim that dnssec is the cause of the
internet melt down!

Paul



More information about the bind-users mailing list