Skip to Content.
Sympa Menu

dns-operations - Re: [opennic-dns-operations] ALERT - If you are getting high DNS traffic, please read!

dns-operations AT lists.opennicproject.org

Subject: Dns-operations mailing list

List archive

Re: [opennic-dns-operations] ALERT - If you are getting high DNS traffic, please read!


Chronological Thread 
  • From: Alejandro Bonet <albogoal AT gmail.com>
  • To: dns-operations AT lists.opennicproject.org
  • Subject: Re: [opennic-dns-operations] ALERT - If you are getting high DNS traffic, please read!
  • Date: Thu, 12 Dec 2013 10:44:21 +0100

My vps provider has closed my 53 port at 185.16.40.143...

Im talking with them explaining the case, but they dont answer yet...

My port53 filter reduces the number of bits in the iptables parameter
"--hashlimit-srcmask",
if there are many many queries per second, and in this way it allways
keep "alive", but banning
too much queries...

In the most extreme case, it reduces the mask to "one bit", dropping
half the traffic (aleatory)...

This permitted me to survive the "Fusl wave" automatically...

But also, now it gets me in problems with my vps provider...

They see stats and decide to close my port 53...

GRRR!!!

Alejandro Bonet
albogoal AT gmail.com

PD: I hope they reconsider it...

It is a good and cheap vps service, but it is not the only one...


2013/12/12, Guillaume Parent <gparent AT gparent.org>:
> Please do not ban whole countries to block this, that is a ridiculous
> overreaction. He just gave you a list - use it.
>
>
>
>
> On Wed, Dec 11, 2013 at 11:18 PM, Hospedaje Web y Servidores Dedicados <
> ventas AT dedicados.com.mx> wrote:
>
>> Well, im going to start with that, and if all the load goes off, i remove
>> the country block, and add only those ips =)
>>
>>
>>
>> Ing. Alejandro M.
>> Hospedaje Web y Servidores Dedicados
>> http://www.dedicados.com.mx
>> ------
>> correo / msn: ventas AT dedicados.com.mx
>> skype: dedicados
>> ------
>> El 11/12/2013 05:11 p.m., Jeff Taylor escribió:
>>
>> I wouldn't do that, because a number of European users are making use of
>>> US servers. Besides, it makes it difficult to be open to all if you're
>>> banning whole countries. :-)
>>>
>>> On 12/11/2013 03:46 PM, Hospedaje Web y Servidores Dedicados wrote:
>>>
>>>> Thanks for the info Jeff, as my servers are on USA ( most of them ) can
>>>> i ban the whole country? "DE".
>>>>
>>>>
>>>>
>>>> Ing. Alejandro M.
>>>> Hospedaje Web y Servidores Dedicados
>>>> http://www.dedicados.com.mx
>>>> ------
>>>> correo / msn: ventas AT dedicados.com.mx
>>>> skype: dedicados
>>>> ------
>>>>
>>>
>>>
>>> ----
>>> To unsubscribe, email
>>> dns-operations-unsubscribe AT lists.opennicproject.org
>>>
>>>
>>
>> ----
>> To unsubscribe, email dns-operations-unsubscribe AT lists.opennicproject.org
>>
>
> ----
> To unsubscribe, email dns-operations-unsubscribe AT lists.opennicproject.org



Archive powered by MHonArc 2.6.19.

Top of Page