Discuss mailing list

[Julian DeMarchi <julian AT jdcomputers.com.au>]

On 05/21/2013 02:11 AM, Psilo wrote:
> Thanks for your answer.
> 
> However I just found out the filter is actually efficient, just the dnstop
> tool captures the packets before they are filtered.
> 
> Now I use "dnstop eth0 -R" to see only DNS replies instead of queries, and
> there is nothing with "isc.org" or "ripe.net".
> 
> Sorry about this mistake.

If you're blocking on box then you are still going to be receiving a
load of traffic. There is no way to stop the inbound traffic. However by
not responding you should see the traffic drop by a half.

I had to kill a DNS server off last year as the inbound traffic was
still killing me in B/W costs.

--julian