[ratelimits] Amusing observation

Tony Finch dot at dotat.at
Mon Aug 6 12:47:53 UTC 2012


Thanks for the updated patches which fix the problems I reported.
I just noticed an amusing interaction between the ratelimiter and
recursive clients - the stub resolver search list can lead to NXDOMAIN
rate-limiting. Yes I'll start using the exempt-clients option :-)

06-Aug-2012 13:39:35.938 queries: info: client 127.0.0.1#39983 (blakeparsons.com): query: blakeparsons.com IN AAAA + (127.0.0.1)
06-Aug-2012 13:39:35.938 queries: info: client 127.0.0.1#54072 (blakeparsons.com.csi.private.cam.ac.uk): query: blakeparsons.com.csi.private.cam.ac.uk IN A + (127.0.0.1)
06-Aug-2012 13:39:35.938 queries: info: client 127.0.0.1#27816 (blakeparsons.com.csi.private.cam.ac.uk): query: blakeparsons.com.csi.private.cam.ac.uk IN AAAA + (127.0.0.1)
06-Aug-2012 13:39:35.939 queries: info: client 127.0.0.1#60130 (blakeparsons.com.csi.cam.ac.uk): query: blakeparsons.com.csi.cam.ac.uk IN A + (127.0.0.1)
06-Aug-2012 13:39:35.939 queries: info: client 127.0.0.1#63543 (blakeparsons.com.csi.cam.ac.uk): query: blakeparsons.com.csi.cam.ac.uk IN AAAA + (127.0.0.1)
06-Aug-2012 13:39:35.939 queries: info: client 127.0.0.1#10415 (blakeparsons.com.csx.cam.ac.uk): query: blakeparsons.com.csx.cam.ac.uk IN A + (127.0.0.1)
06-Aug-2012 13:39:35.939 rate-limit: info: limiting NXDOMAIN responses to 127.0.0.0/24 for IN A cam.ac.uk

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Forties: Cyclonic 3 or 4, becoming north or northwest, 4 or 5. Slight,
becoming moderate later in northeast. Thundery showers. Moderate or good.


More information about the ratelimits mailing list