안녕하세요.

# CentOS-Base.repo

#

# This file uses a new mirrorlist system developed by Lance Davis for CentOS.

# The mirror system uses the connecting IP address of the client and the

# update status of each mirror to pick mirrors that are updated to and

# geographically close to the client.  You should use this for CentOS updates

# unless you are manually picking other mirrors.

#

# If the mirrorlist= does not work for you, as a fall back you can try the 

# remarked out baseurl= line instead.

#

#

[base]

name=CentOS-$releasever - Base

baseurl=http://vault.centos.org/4.8/os/$basearch/

gpgcheck=0

priority=1

protect=1

#released updates

[update]

name=CentOS-$releasever - Updates

baseurl=http://vault.centos.org/4.8/updates/$basearch/

gpgcheck=0

priority=1

protect=1

#packages used/produced in the build but not released

[addons]

name=CentOS-$releasever - Addons

baseurl=http://vault.centos.org/4.8/addons/$basearch/

gpgcheck=0

priority=1

protect=1

#additional packages that may be useful

[extras]

name=CentOS-$releasever - Extras

baseurl=http://vault.centos.org/4.8/extras/$basearch/

gpgcheck=0

priority=1

protect=1

#additional packages that extend functionality of existing packages

[centosplus]

name=CentOS-$releasever - Plus

baseurl=http://vault.centos.org/4.8/centosplus/$basearch/

gpgcheck=0

enabled=0

priority=2

protect=1

#contrib - packages by Centos Users

[contrib]

name=CentOS-$releasever - Contrib

baseurl=http://vault.centos.org/4.8/contrib/$basearch/

gpgcheck=0

enabled=0

priority=2

protect=1

libmcrypt-2.5.7+(3)+(1).tar.gz

별로 사용하는것도 없는데 트래픽이 많이 나올때

이것 저것 죽여봤다. 아파치 에스큐엘 에프티피등등 named를 죽이니 트래픽이 정상이 됐다.

message 로그를 보니 특정 아이피가 계속 접근을 한다.

두 아이피를 차단하니 트래픽이 정상이 됐다.

그런데 이 두 아이피가 다른 서버에서도 찍힌다. 그래서 아에 백본에서 차단했다.

아래는 메세지 로그

Apr  2 10:11:04 ns named[25359]: client 199.250.62.3#54445: no more recursive clients: quota reached

Apr  2 10:11:04 ns named[25359]: client 193.23.181.38#33974: no more recursive clients: quota reached

Apr  2 10:11:04 ns named[25359]: client 199.250.62.3#29829: no more recursive clients: quota reached

Apr  2 10:11:04 ns named[25359]: client 193.23.181.38#6069: no more recursive clients: quota reached

구글링을 해보니 ..

http://ttend.tistory.com/203