[Pdns-users] DoS with AXFR transfer

[Brian Candler]

On 22/12/2019 08:25, Adrian Kägi wrote:
> What do you recommend? tune MySQL Server? add DoS prevention tool in 
> front like fail2ban?

- Restrict zone transfers by source IP address
- Restrict zone transfers by TSIG signature
- Disable zone transfers entirely, and use native backend replication 
instead (in your case: use mysql replication)