nanog mailing list archives

RE: DNS - connection limit (without any extra hardware)


From: "Geo." <geoincidents () nls net>
Date: Fri, 8 Dec 2006 11:52:52 -0500


Actually, reading your reply (which is the same as my own, pretty much), I
figure the guy asked a question and he has a real problem. Assuming he
doesn't want to clean them up is not nice of us.

Infected machines (bots) will cause a lot more than just DNS issues. Issues
like this have a way of getting worse all by themselves if not addressed.

Anyway, to play nice.. how about using a router to dampen traffic much like
icmp dampening? Would it be possible to do DNS dampening?

Geo.



Current thread: