[dnsdist] Dynamic Rule Block Logs Host Address

Brian Sullivan brian.sullivan at lookout.com
Thu Aug 29 13:50:23 UTC 2019


When I use a dynamic rule block and it gets triggered I see a log message
as follows:
*dnsdist[15542]: Inserting dynamic block for for 10 seconds:
Exceeded Query Rate*

Is there a way to truncate the IP Address? It is considered PII and we are
required to not log any PII.


Brian M. Sullivan
Senior Staff Security Intelligence Engineer
bsullivan at lookout.com |  www.lookout.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20190829/a4852cae/attachment.htm>

More information about the dnsdist mailing list