<html><head>
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
</head><body bgcolor="#FFFFFF" text="#000000"><br>
<br>
Daniel Stirnimann wrote:
<blockquote cite="mid:51386859.10105@switch.ch" type="cite">
<pre wrap="">Hi Tony
Thanks for your corrections of the defaults. Seems I took up the value 5
from somewhere else.
</pre>
<blockquote type="cite"><blockquote type="cite"><pre wrap=""> // set to max. of query load the server can handle x WINDOW
max-table-size 1000000;
</pre></blockquote><pre wrap="">The documentation suggests that the table size should be about
the query rate per second, not per window.
</pre></blockquote>
<pre wrap=""><!---->
You are right, the documentation suggests to set it only to about the
query rate per seconds. I got the other definition from the paper
"Defending against DNS reflection amplification attacks",
<a class="moz-txt-link-freetext" href="http://www.nlnetlabs.nl/downloads/publications/report-rrl-dekoning-rozekrans.pdf">http://www.nlnetlabs.nl/downloads/publications/report-rrl-dekoning-rozekrans.pdf</a></pre>
</blockquote>
<pre wrap="">
</pre>
i suggest reading the materials at
<a class="moz-txt-link-freetext" href="http://www.redbarn.org/dns/ratelimits">http://www.redbarn.org/dns/ratelimits</a>, both the tech note and ARM
version, to learn the details of how RRL is supposed to work, and how it
is implemented in BIND9 and other servers.<br>
</body></html>