dns attempts to rate limit error packets to avoid being used in reflection attacks, but currently the ratelimiter is very poorly tuned...
isomer
