[ale] Fwd: Under Attack, my dns servers

[Chuck Payne]

Guys,

I am under attack where my dns server is being used to do a ddos attack. I
believe it's a bot net, because the ip are too random. I don't think the
domain I am seeing in my bind log is real

fkfkfkfz.guru

06-Oct-2014 11:23:28.146 client 92.222.9.179#49643: query: fkfkfkfz.guru IN
ANY +E (50.192.59.225)
06-Oct-2014 11:23:28.146 client 92.222.9.179#49643: query (cache)
'fkfkfkfz.guru/ANY/IN' denied
06-Oct-2014 11:23:28.146 client 92.222.9.179#49643: drop REFUSED response
to 92.222.9.0/24

I have turn on recursion, but now people can't find my domains any more.
I have also try to limit the rate as well

  rate-limit {
                responses-per-second 25;
                window 5;
        };


I am running Debian and openSUSE.

Anything I can do to stop them and make where people can find my domains? I
don't want to have to pay for something I can do and have control over.

-- 
Terror PUP a.k.a
Chuck "PUP" Payne

678 636 9678
-----------------------------------------
Discover it! Enjoy it! Share it! openSUSE Linux.
-----------------------------------------
openSUSE -- Terrorpup
openSUSE Ambassador/openSUSE Member
skype,twiiter,identica,friendfeed -- terrorpup
freenode(irc) --terrorpup/lupinstein
Register Linux Userid: 155363

Have you tried SUSE Studio? Need to create a Live CD,  an app you want to
package and distribute , or create your own linux distro. Give SUSE Studio
a try.




-- 
Terror PUP a.k.a
Chuck "PUP" Payne

678 636 9678
-----------------------------------------
Discover it! Enjoy it! Share it! openSUSE Linux.
-----------------------------------------
openSUSE -- Terrorpup
openSUSE Ambassador/openSUSE Member
skype,twiiter,identica,friendfeed -- terrorpup
freenode(irc) --terrorpup/lupinstein
Register Linux Userid: 155363

Have you tried SUSE Studio? Need to create a Live CD,  an app you want to
package and distribute , or create your own linux distro. Give SUSE Studio
a try.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20141006/2da61299/attachment.html>