[dnsdist] dynblock rules AND

[Remi Gacogne]

Hi Nico,

On 6/1/19 5:39 AM, Nico wrote:
> Hi!
> Small question about dynamic block rules
> there is no AND for rate limiting rules ?
> 
> its always OR
> 
> local dbr = dynBlockRulesGroup()
> dbr:setQTypeRate(dnsdist.ANY, 5, 10, "Exceeded ANY rate", 60)
> dbr:setResponseByteRate(10000, 10, "Exceeded resp BW rate", 60)
> 
> If I want to limit TXT byte rate for example....

There is indeed no way to combine rules for the dynamic blocking
feature. You should be able to do the kind of rate-limiting you have in
mind with regular rules, though.

Best regards,
-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20190603/188279d5/attachment.sig>