Bind stats - denied queries?

Karl Pielorz kpielorz_lst at
Mon Nov 30 10:07:38 UTC 2020


We've been seeing a huge increase in 'denied queries' against a couple of 
Bind servers we look after (Bind 9.16.9) - these are currently logged as:

Nov 30 00:00:00 client @0xXXXXX X.X.X.X#48536 (.): query (cache) './ANY/IN' 

This appears like it might be someone trying (unsuccessfully) to use us as 
an amplifier / reflector.

We've got Bind's statistics file setup - but I can't see there's any entry 
for these "denied" queries? - As we'd really like to monitor this.

If anyone knows what stat these turn up in the statistics file (if at all?)



More information about the bind-users mailing list