DNS amplification attacks and DNS cache poisoning "pizzaseo.com RRSIG IN denied"

[yaka]

@knebb

And they all say the same as I did initially: You have (or had) DNS visible to public. It might be forwarded to UCS or to PiHole. But both is bad. Might be your PiHole forwards it to UCS? I dunno

Since 5 o’clock everything is back to normal.
I can’t explain why.
Pihole is not accessible from the internet.

I will check my Pihole configuration, and add a rule in my Fail2ban configuration.

Anyway, thanks for your patience.