How to suppress ADDITIONAL SECTION per zone
John Wobus
jw354 at cornell.edu
Fri Jul 5 14:21:26 UTC 2013
> Other possibility is to implement packet rate limiting - a patch was
> discussed here a few days/weeks ago.
I endorse this suggestion: we were faced with such attacks and were
naturally leery about issues we might run into running a patched bind
and the additional tuning it could require. Our experience is: the RRL
patch, used with its default parameters, simply does the job.
John
Cornell University IT
More information about the bind-users
mailing list