nanog mailing list archives

RE: Performance Issues - PTR Records


From: Barry Shein <bzs () world std com>
Date: Wed, 2 Nov 2011 19:08:47 -0400


As a web host, we frequently find customers who have
added Apache rules to their ecommerce sites to block
undesirable traffic, such as credit card scammers, etc.
Not knowing any better, they often do this by just
blocking anything that ends in .in to block Indonesia
for example.  Well, once you choose to block by 
resolved name, now that site has to do a dns lookup
for every incoming request to see if it resolves to a
name that should be blocked.

Another practical problem with this approach is that .IN is India but
hey, at least it blocks something :-)

-- 
        -Barry Shein, that'd be .ID for Indonesia

The World              | bzs () TheWorld com           | http://www.TheWorld.com
Purveyors to the Trade | Voice: 800-THE-WRLD        | Dial-Up: US, PR, Canada
Software Tool & Die    | Public Access Internet     | SINCE 1989     *oo*


Current thread: