[bind10-dev] Rate limiting for logging?

Stephen Morris stephen at isc.org
Thu Jul 18 09:03:23 UTC 2013


On 17/07/13 08:41, Michal 'vorner' Vaner wrote:

> 
> If we care about the MESSAGE_ID only, we don't have this problem.

I agree - just limit based on message ID. If it is suspected that a
message is being output a large number of times as a result of a DoS
attack, the requirement would be to suppress that message, regardless
of parameters.

Stephen


More information about the bind10-dev mailing list