no more recursive clients: quota reached

Markus Bauer mc_mc_mc at lycos.de
Wed Nov 10 09:22:36 UTC 2004


Hi,

First: I searched google and google groups for this error message and 
everybody said that I have to incrase max recursive clients and that this 
message can only appear on large network or with DNS DoS attacks.

Hmm, I have a really small network. Yes, really small, my DNS Server only 
serves *1* PC (my own). It is accessible in the whole _private_ LAN and I 
cannot believe that anyone from this small network (I know everybody of 
the 2 people in my family ;-) is able to do an DoS attack.

It's impossible to reach the DNS server from outside because of NAT and 
packet filters and as you can see below, DNS is bound to local interfaces 
only.

My big problem is now, that i can only find this error messages in the 
/var/log/syslog and nothing more. Also, there are no excessive activities 
logged. The first activity logged is from today 7:57 from my own PC.

The last time this happened, I had no time so I just restartet named.

DNS is running as user/group dns chrooted to /home/system/dns.
That's my small config-file:

options {
        directory "/";
        auth-nxdomain yes;    # conform to RFC1035
        forwarders {
            192.168.200.120;  # next servers
            192.168.0.1;
        };
        listen-on port 53 { 127.0.0.1; 192.168.200.121; };
};

(...)


Can anyone explain this?

Thanks

Mark



More information about the bind-users mailing list