3 ms·
One time I had an inadvert DDoS against my non-recursive authoritative DNS server and no way to stop the flooding of log file. Problem is DNS query can come fr
by egberts1 3y ago
One time I had an inadvert DDoS against my non-recursive authoritative DNS server and no way to stop the flooding of log file.
Problem is DNS query can come from anywhere so latching to the top-level domain (TLD) name became a must.
Fail2ban, to the rescue.
https://egbert.net/blog/articles/troubleshooting-regex-in-fail2ban-during-bind9-ddos.html https://egbert.net/blog/articles/troubleshooting-regex-in-fa...