<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p>@winfried @otto</p>
<p><br>
</p>
<p>thanks for your feedback ;)</p>
<p><br>
</p>
<p>Regards,</p>
<p>Kilian</p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Von:</b> Pdns-users <pdns-users-bounces@mailman.powerdns.com> im Auftrag von Winfried via Pdns-users <pdns-users@mailman.powerdns.com><br>
<b>Gesendet:</b> Montag, 3. Juni 2024 19:34:56<br>
<b>An:</b> All about using and deploying powerdns<br>
<b>Cc:</b> Winfried<br>
<b>Betreff:</b> Re: [Pdns-users] DNSBomb</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText"><br>
<br>
Hello Kilian,<br>
<br>
>> Are there any recommended settings for auth or dnsdist for mitigation such attacks?<br>
<br>
>When using dnsdist before a recursor, you could apply client rate limiting<br>
>to further protect against this and similar attacks.<br>
<br>
see<br>
<br>
<a href="https://dnsdist.org/guides/dynblocks.html">https://dnsdist.org/guides/dynblocks.html</a><br>
<a href="https://dnsdist.org/advanced/qpslimits.html">https://dnsdist.org/advanced/qpslimits.html</a><br>
<br>
for some documentation and examples.<br>
<br>
Winfried<br>
_______________________________________________<br>
Pdns-users mailing list<br>
Pdns-users@mailman.powerdns.com<br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</div>
</span></font>
</body>
</html>