[Pdns-users] Mitigating / stopping recent Denial of Service Attacks

bert hubert bert.hubert at netherlabs.nl
Wed Jun 4 16:04:42 UTC 2014


On 04 Jun 2014, at 17:20, okTurtles <hi at okturtles.com> wrote:

> I tried commenting out `forward-zones-recurse`, but that made things worse. Loading pastebin.com and ycombinator.com failed with SERVFAIL.
> 
> I did manage to get the trace-regex for them though: http://pastebin.com/bvsRQc81

It mentions four timeouts reaching required servers. If your link is actually congested, you could try raising the timeout  ‘network-timeout=5000’.

	Bert


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20140604/7521f401/attachment-0001.html>


More information about the Pdns-users mailing list