[BlueOnyx:12563] Re: DNS Spamming

[BB-ONE.net - BX/BQ-VPS-Hosting in Berlin]

Hi Will,

we did this with fail2ban.
We grepped the  bad requests, took a pattern and let fail2ban ban all ip 
with this pattern.
This workes fine for us.

Dirk

Am 18.03.2013 12:00, schrieb Will Nordmeyer:
>
> Last night (actually over the past few days), my server has been 
> hammered with DNS requests (to the tune of about 5 Mb/sec bandwidth, 6 
> IPs, 10-20 connections, thousands of requests)... Is there a way for 
> bfd/apf or another tool to monitor for this and add the offending 
> servers to either deny_hosts.rules or iptables?
>
> --Will
>
>
>
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx


-- 
Dirk Jessel

BB-ONE.net - BX/BQ-VPS-Hosting in Berlin
Support-Team
-----------------------------------------------------------------------
     Internetpartner der Wirtschaft
     Web:       www.bb-one.net
     eMail:     support at bb-one.net
     Fon:       +49 30 22 49 46 30
     
     BB-ONE.net Ltd.
     Niederlassung Berlin
     13439 Berlin
     Borgsdorfer Strasse 30	
     USt-IdNr. DE188018781
     Amtsgericht Berlin-Charlottenburg, HRB 104629
     Geschäftsführer Uwe Stache
-----------------------------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20130318/afc725ab/attachment.html>