[Pdns-users] dns flood problem

Steffan Noord steffannoord at gmail.com
Mon Jun 3 10:10:52 UTC 2013


Hello Nick,

Do you want to share your config with me.
Wat are dns queries that we want to block ?

Im starting the logs of pdns on a higher level
I see some of these errors

Received a malformed qdomain from 194.xx.xx.xx, 'error(2):\032Connection\032to\032service\032failed.xxx.com': sending servfail


-----Oorspronkelijk bericht-----
Van: Nikolaos Milas [mailto:nmilas at admin.noa.gr] 
Verzonden: maandag 3 juni 2013 11:25
Aan: Steffan Noord
CC: pdns-users at mailman.powerdns.com
Onderwerp: Re: [Pdns-users] dns flood problem

On 3/6/2013 11:48 πμ, Steffan Noord wrote:

> Last weekend i had a DNS attack
> Is there some kind of IDS i can install in front of the pdns installation ?
>
> Thanxs for any advice on this.
>
>

Start from fail2ban.

Easy to setup and very effective.

Regards,
Nick






More information about the Pdns-users mailing list