[dnsdist] Dynamic Rule Block Logs Host Address

Brian Sullivan brian.sullivan at lookout.com
Thu Aug 29 13:50:23 UTC 2019


Hi,

When I use a dynamic rule block and it gets triggered I see a log message
as follows:
*dnsdist[15542]: Inserting dynamic block for 10.51.76.142 for 10 seconds:
Exceeded Query Rate*

Is there a way to truncate the IP Address? It is considered PII and we are
required to not log any PII.

Regards,
brian
-- 



Brian M. Sullivan
Senior Staff Security Intelligence Engineer
bsullivan at lookout.com |  www.lookout.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20190829/a4852cae/attachment.htm>


More information about the dnsdist mailing list