RethinkDNS has a lockdown mode where it blocks everything you don’t explicitly unblock. Doesn’t help with memory usage but might be useful to not be part of a botnet or ten.
If that’s a dns server, that will help with a lot, but not against everything. Some malware has hardcoded IPs to phone home, so they don’t need to look up any ips.
RethinkDNS has a lockdown mode where it blocks everything you don’t explicitly unblock. Doesn’t help with memory usage but might be useful to not be part of a botnet or ten.
If that’s a dns server, that will help with a lot, but not against everything. Some malware has hardcoded IPs to phone home, so they don’t need to look up any ips.