~mdw / firewall / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a83c961) | patch
Rate limiting for incoming DNS queries over UDP.
authorMark Wooding <mdw@distorted.org.uk>
Fri, 8 Jun 2012 00:51:05 +0000 (01:51 +0100)
committerMark Wooding <mdw@distorted.org.uk>
Fri, 8 Jun 2012 00:51:05 +0000 (01:51 +0100)
commit7dde20fa84bad82640c029a7c41e213a576d777a
treeb73a1dcafd7f52b2d54369f806bd19d68d111bcetree | snapshot (tar.gz zip)
parenta83c9611b4ea63ebe1432fad05593f23ae1d1f6bcommit | diff
Rate limiting for incoming DNS queries over UDP.

We provide DNSsec-signed responses, and could be used as a DDoS
amplifier.  Apply rate-limiting to incoming traffic to mitigate this
effect.

This should be removed if and when BIND acquires its own more
intelligent rate-limiting.
bookends.m4 diff | blob | blame | history
functions.m4 diff | blob | blame | history
precision.m4 diff | blob | blame | history
radius.m4 diff | blob | blame | history
vampire.m4 diff | blob | blame | history
Firewall scripts for distorted.org.uk.