Is there any way to block some clients?

[isac322]

I made it as a public DNS, but some overseas IPs are continuously sending unnecessary requests. It would be nice to be able to deny DNS requests based on IP.

[kwitsch]

You could define a blacklist with a regex entry that matches every request and use it for the IP address. 🤔

Something like:

blocking:
  blackLists:
    everything:
      - |
        /.*/
  clientGroupsBlock:
    123.123.123.123:
      - everything 

[0xERR0R]

It should work, but I think it should be /.*/

[kwitsch]

My bad, your right i missed a character.

[isac322]

Thanks!

[ThinkChaos]

This sounds more like a job for your firewall IMO.

[ThinkChaos]

Maybe combined with Crowdsec/fail2ban if you want to make it dynamic.