How to suppress ADDITIONAL SECTION per zone

John Wobus jw354 at
Fri Jul 5 14:21:26 UTC 2013

> Other possibility is to implement packet rate limiting - a patch was
> discussed here a few days/weeks ago.

I endorse this suggestion: we were faced with such attacks and were
naturally leery about issues we might run into running a patched bind
and the additional tuning it could require.  Our experience is: the RRL
patch, used with its default parameters, simply does the job.

Cornell University IT

More information about the bind-users mailing list