message ``sendto failed: Invalid argument''

Peter Koch pk at DENIC.DE
Mon Feb 6 19:08:48 UTC 2006


On Mon, Jan 30, 2006 at 11:03:46AM +0100, Arnt Gulbrandsen wrote:

> After all, anyone with access to the source can DOS nsd perfectly well 
> as it is.

it's a general trade-off between logging and being able to recognize problems
and silence and the absence of such opportunity. The general problem can
be solved by rate limiting error messages, which in turn requires more state
which opens another DoS path etc.
Would those CPU cycles necessary to enhance the currrent message be critical? 

-Peter



More information about the nsd-users mailing list