<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">RPZ cannot rewrite servfail, it is
designed to replace a valid response.<br>
<br>
On 2/28/14 11:42 AM, Jason Brown wrote:<br>
</div>
<blockquote
cite="mid:2C0CECF1213A684BB410E11AB38473183BB780@KCOMEXMBX01.kcom.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<style>
<!--
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:#1F497D}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:#1F497D">Isn’t this where RPZ comes in? Using RPZ
means it is quicker and easier to null amplification, also
easier to remove if you do all this with nsupdate, you can
also create a webpage for TS to query any fault against.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:#1F497D"> </span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;
font-family:"Tahoma","sans-serif""
lang="EN-US">From:</span></b><span
style="font-size:10.0pt;
font-family:"Tahoma","sans-serif""
lang="EN-US">
<a class="moz-txt-link-abbreviated" href="mailto:bind-users-bounces+jason.brown=kcom.com@lists.isc.org">bind-users-bounces+jason.brown=kcom.com@lists.isc.org</a>
[<a class="moz-txt-link-freetext" href="mailto:bind-users-bounces+jason.brown=kcom.com@lists.isc.org">mailto:bind-users-bounces+jason.brown=kcom.com@lists.isc.org</a>]
<b>On Behalf Of </b>Peter Andreev<br>
<b>Sent:</b> 28 February 2014 09:36<br>
<b>To:</b> Dmitry Rybin<br>
<b>Cc:</b> BIND Users Mailing List<br>
<b>Subject:</b> Re: Bind vs flood</span></p>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">Well, at first glance it looks like
malicious activity, so the best action is to call all users,
suspected in sending such requests, and warn them.<br>
The fast and very (very-very-very) dirty solution is to set
up zone <a moz-do-not-send="true"
href="http://niqcs.www.84822258.com" target="_blank">
84822258.com</a> on your resolver. This should supress
outgoing queries and thus minimize resolving time.</p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"> </p>
<div>
<p class="MsoNormal">2014-02-28 12:06 GMT+04:00 Dmitry Rybin
<<a moz-do-not-send="true"
href="mailto:kirgudu@corbina.net" target="_blank">kirgudu@corbina.net</a>>:</p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">On
27.02.2014 09:59, Dmitry Rybin wrote:</p>
<p class="MsoNormal">Bind answers with "Server failure".
On high load (4 qps) all normal<br>
client can get Servfail on good query. Or query can
execute more 2-3<br>
second.</p>
<p class="MsoNormal"> </p>
</div>
<p class="MsoNormal">I have an a mistake, 4'000 QPS.</p>
<div>
<div>
<p class="MsoNormal"><br>
_______________________________________________<br>
Please visit <a moz-do-not-send="true"
href="https://lists.isc.org/mailman/listinfo/bind-users"
target="_blank">
https://lists.isc.org/mailman/listinfo/bind-users</a>
to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a moz-do-not-send="true"
href="mailto:bind-users@lists.isc.org"
target="_blank">bind-users@lists.isc.org</a><br>
<a moz-do-not-send="true"
href="https://lists.isc.org/mailman/listinfo/bind-users"
target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
<br clear="all">
<br>
-- <br>
Is there any problem Exterminatus cannot solve? I have not
found one yet.</p>
</div>
</div>
<br>
<font color="Blue" face="Arial" size="1"><br>
<br>
<br>
This email has been scanned for all viruses.<br>
<br>
Please consider the environment before printing this email.<br>
<br>
The content of this email and any attachment is private and may
be privileged. If you are not the intended recipient, any use,
disclosure, copying or forwarding of this email and/or its
attachments is unauthorised. If you have received this email in
error please notify the sender by email and delete this message
and any attachments immediately. Nothing in this email shall
bind the Company or any of its subsidiaries or businesses in any
contract or obligation, unless we have specifically agreed to be
bound.<br>
<br>
KCOM Group PLC is a public limited company incorporated in
England and Wales, company number 02150618 and whose registered
office is at 37 Carr Lane, Hull, HU1 3RE.<br>
<br>
118288 - KCOM Group UK Directory Enquiries. Calls will cost no
more than £2.58 connection + £1.79p per minute following the
first 60 seconds, including VAT from a KC or BT landline. Call
charges from mobiles and other networks may vary. If you are
calling from a mobile you will now receive your requested number
via text message. You will not be charged for the text message.<br>
<br>
</font>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></pre>
</blockquote>
<br>
</body>
</html>