[dnsdist] Dynamic Rule Block Logs Host Address
brian.sullivan at lookout.com
Thu Aug 29 13:50:23 UTC 2019
When I use a dynamic rule block and it gets triggered I see a log message
*dnsdist: Inserting dynamic block for 10.51.76.142 for 10 seconds:
Exceeded Query Rate*
Is there a way to truncate the IP Address? It is considered PII and we are
required to not log any PII.
Brian M. Sullivan
Senior Staff Security Intelligence Engineer
bsullivan at lookout.com | www.lookout.com
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dnsdist