On 07-12-18 15:15, James Bellegarde wrote: > Hello, > > Actually, I'm looking for a way to configure dnsmasq against DNS DoS > attack. > > Fail2ban is one of the must famous service that provide this type of > filter but only for BIND services. Is there a filter working with the > dnsmasq's logs ? > > Looking forward to hearing from you. >
Please post some logs from such an attack and we might be able to help
you. F2b can support many services by just adding configuration, but we
need to see the logging first.
BTW I think it's weird your dnsmasq is suffering from a DOS, as dnsmasq
is not a service you'd expose to th epublic internet, but only to your LAN.
Kind regards,
Tom
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
