Re: DNS - connection limit (without any extra hardware)

["Luke C" <very.luke () gmail com>]

> I use to slave "." which can save time on recursive DNS servers when they
have
> a lot of dross to answer (assuming it is totally random dross).

I'm not sure to understand your solution.
You configure your name-server as a slave-root-server?

On 12/8/06, Simon Waters <simonw () zynet net> wrote:
> On Friday 08 December 2006 14:40, you wrote:
> >
> > For this reason, I would like that a DNS could response maximum to 10
> > queries per second given by every single Ip address.
>
> That may trap an email server or two.
>
> Did you consider checking what they are looking up, and lying to them
> about
> the TTL/answer "127.0.0.1 for a week" maybe better than NXDOMAIN.
>
> I use to slave "." which can save time on recursive DNS servers when they
> have
> a lot of dross to answer (assuming it is totally random dross).
>
> I suspect complex rate limiting may be nearly as expensive as providing
> DNS
> answers with Bind9.