[Pdns-users] Mitigating / stopping recent Denial of Service Attacks
bert hubert
bert.hubert at netherlabs.nl
Wed Jun 4 16:04:42 UTC 2014
On 04 Jun 2014, at 17:20, okTurtles <hi at okturtles.com> wrote:
> I tried commenting out `forward-zones-recurse`, but that made things worse. Loading pastebin.com and ycombinator.com failed with SERVFAIL.
>
> I did manage to get the trace-regex for them though: http://pastebin.com/bvsRQc81
It mentions four timeouts reaching required servers. If your link is actually congested, you could try raising the timeout ‘network-timeout=5000’.
Bert
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20140604/7521f401/attachment-0001.html>
More information about the Pdns-users
mailing list