[dnsdist] ComboAddress truncate function?

[abang at t-ipnet.net]

My guess is that dq.remoteaddr:truncate(24) doesn't truncate the address in dq. Instead it *returns* the truncated address.

Winfried


Am 28. August 2019 17:35:24 MESZ schrieb Brian Sullivan <brian.sullivan at lookout.com>:
>Hi All,
>
>I am trying to use the truncate function associated with the
>CombAddress
>object.
>
>Here is the config:
>
>
>
>
>
>
>*-- Any traffic that exceeds max qps will be loggedfunction
>rateLimitRule(dq)  dq.remoteaddr:truncate(24)  errlog("Rate Limit
>Exceeded:
>DNSDistRateLimiting "..dq.remoteaddr:toString())  return
>DNSAction.None,
>""endaddAction(MaxQPSIPRule(10, 24, 48), LuaAction(rateLimitRule))*
>
>Unfortunately I see the following output:
>
>
>*dnsdist[882]: Rate Limit Exceeded: DNSDistRateLimiting 10.51.13.64*
>
>I know this must work so I must be doing something wrong.
>
>Regards,
>brian
>-- 
>
>
>
>Brian M. Sullivan
>Senior Staff Security Intelligence Engineer
>bsullivan at lookout.com |  www.lookout.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20190828/a59144c0/attachment.htm>