<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"></head>My guess is that dq.remoteaddr:truncate(24) doesn't truncate the address in dq. Instead it *returns* the truncated address.<br><br>Winfried<br><br><br><div class="gmail_quote">Am 28. August 2019 17:35:24 MESZ schrieb Brian Sullivan <brian.sullivan@lookout.com>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">Hi All,<div><br></div><div>I am trying to use the truncate function associated with the CombAddress object. </div><div><br></div><div>Here is the config:</div><div><font face="monospace"><b>-- Any traffic that exceeds max qps will be logged<br>function rateLimitRule(dq)<br> dq.remoteaddr:truncate(24)<br> errlog("Rate Limit Exceeded: DNSDistRateLimiting "..dq.remoteaddr:toString())<br> return DNSAction.None, ""<br>end<br>addAction(MaxQPSIPRule(10, 24, 48), LuaAction(rateLimitRule))</b></font><br clear="all"><div><br></div><div>Unfortunately I see the following output:</div><div><br></div><div><font face="monospace"><b>dnsdist[882]: Rate Limit Exceeded: DNSDistRateLimiting 10.51.13.64<br></b></font></div><div><font face="monospace"><b><br></b></font></div><div><font face="arial, sans-serif" style="">I know this must work so I must be doing something wrong.</font></div><div><font face="arial, sans-serif" style=""><br></font></div><div><font face="arial, sans-serif" style="">Regards,</font></div><div><font face="arial, sans-serif" style="">brian</font></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><p><span></span><span><img src="https://docs.google.com/uc?export=download&id=0BzPp9aRH66f2d2JzS2ZRUHl6dEE&revid=0BzPp9aRH66f2SHFsTEhtT3JZUGs3aWwxY0MzSEF0VEJNVFJrPQ" width="200" height="50"> </span></p><p><span><span><font color="#666666">Brian M. Sullivan<br>Senior Staff Security Intelligence Engineer</font><br><font color="#0000ff"><a href="mailto:bsullivan@lookout.com" target="_blank">bsullivan@lookout.com</a></font> | <font color="#0000ff"><a href="http://www.lookout.com" target="_blank">www.lookout.com</a></font><font color="#666666"><br></font></span></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</blockquote></div></html>