rate-limit and Facebook IP's

Reindl Harald h.reindl at thelounge.net
Mon Jun 30 12:22:39 UTC 2014


am i the only one facing all day long serveral facebook
networks hit RRL on both nameservers? for me there are
only two options to explain that:

* facebook is too dumb to cache responses (TTL a day)
* that's part of a well distributed amplification trying
  not make much noise on the single involved servers

interesting that this is ongoing for many months

30-Jun-2014 13:24:31.717 rate-limit: limit NODATA responses to 69.171.248.0/24 for ns1.thelounge.net IN  (1abd134b)
30-Jun-2014 13:25:32.184 rate-limit: stop limiting NODATA responses to 69.171.248.0/24 for ns1.thelounge.net IN
(1abd134b)
30-Jun-2014 13:30:29.153 rate-limit: limit NODATA responses to 173.252.74.0/24 for tethys.thelounge.net IN  (1b619c65)
30-Jun-2014 13:31:29.149 rate-limit: stop limiting NODATA responses to 173.252.74.0/24 for tethys.thelounge.net IN
 (1b619c65)
30-Jun-2014 13:37:12.845 rate-limit: limit NODATA responses to 173.252.113.0/24 for ns1.thelounge.net IN  (1abd134b)
30-Jun-2014 13:38:12.035 rate-limit: stop limiting NODATA responses to 173.252.113.0/24 for ns1.thelounge.net IN
(1abd134b)
30-Jun-2014 13:39:21.736 rate-limit: limit NODATA responses to 173.252.77.0/24 for ns2.thelounge.net IN  (1abd134c)
30-Jun-2014 13:39:21.738 rate-limit: limit NODATA responses to 173.252.77.0/24 for arrakis.thelounge.net IN  (2041b582)
30-Jun-2014 13:39:21.873 rate-limit: limit NODATA responses to 173.252.77.0/24 for ns1.thelounge.net IN  (1abd134b)
30-Jun-2014 13:40:22.792 rate-limit: stop limiting NODATA responses to 173.252.77.0/24 for arrakis.thelounge.net IN
 (2041b582)
30-Jun-2014 13:40:22.792 rate-limit: stop limiting NODATA responses to 173.252.77.0/24 for ns1.thelounge.net IN
(1abd134b)
30-Jun-2014 13:40:23.131 rate-limit: stop limiting NODATA responses to 173.252.77.0/24 for ns2.thelounge.net IN
(1abd134c)
30-Jun-2014 14:00:35.542 rate-limit: limit NODATA responses to 31.13.99.0/24 for ns1.thelounge.net IN  (1abd134b)
30-Jun-2014 14:01:36.564 rate-limit: stop limiting NODATA responses to 31.13.99.0/24 for ns1.thelounge.net IN
(1abd134b)
30-Jun-2014 14:16:55.318 rate-limit: limit NODATA responses to 173.252.102.0/24 for ns1.thelounge.net IN  (1abd134b)
30-Jun-2014 14:16:55.328 rate-limit: limit NODATA responses to 173.252.102.0/24 for ns2.thelounge.net IN  (1abd134c)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 246 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140630/a88bd518/attachment.bin>


More information about the bind-users mailing list