Re: DNS - connection limit (without any extra hardware)

[Simon Waters <simonw () zynet net>]

On Friday 08 December 2006 14:40, you wrote:
> For this reason, I would like that a DNS could response maximum to 10
> queries per second given by every single Ip address.

That may trap an email server or two.

Did you consider checking what they are looking up, and lying to them about 
the TTL/answer "127.0.0.1 for a week" maybe better than NXDOMAIN.

I use to slave "." which can save time on recursive DNS servers when they have 
a lot of dross to answer (assuming it is totally random dross).

I suspect complex rate limiting may be nearly as expensive as providing DNS 
answers with Bind9.