Script-kiddie / client <IP> query (cache) '<host>/MX/IN' denied

Denis BUCHER dbucherml at hsolutions.ch
Tue Aug 3 19:03:51 UTC 2010


Dear Lyle,

Le 03.08.2010 18:17, Lyle Giese a écrit :
>> I would like to know if I can block hosts doing that at the level of
>> /etc/hosts.allow or should I do it at the level of Bind itself ?
> Use IPTables or add rules to your firewall. I don't believe that BIND
> pays any attention to /etc/hosts.allow

Yes I tried iptables, it is working perfectly, and /etc/hosts.allow does 
not look to be working. This was pefect :

iptables -I INPUT 3 -p tcp -s 202.152.172.4 --dport 53 -j DROP

Thanks a lot for your help

Denis



More information about the bind-users mailing list