Md. abdullah Al naser via bind-users <bind-users@lists.isc.org> wrote:
> But I want to do like this, the dns queries from 192.168.10.0/24 blocks
> will be matched with RPZ zone and other requests from rest of IPs will
> bypass the RPZ configuration and will match my general "allow-query
> {any;}" statement mentioned in named.conf file.
The way I would do this is with views, e.g.
view main {
match-clients {
192.168.10.0/24;
};
response-policy {
zone "rpz";
};
zone rpz {
# as usual
};
# rest of view config
};
view clear {
# shared cache is more efficient
attach-cache main;
# rest of view config
};
Tony.
--
f.anthony.n.finch <d...@dotat.at> http://dotat.at/
Lands End to St Davids Head including the Bristol Channel: Southerly or
southeasterly 5 to 7, but 3 or 4 at first in the Bristol Channel, then perhaps
gale 8 later in west. Smooth or slight at times in Bristol Channel, otherwise
moderate or rough, occasionally very rough in west. Occasional rain mainly in
west. Moderate or good, occasionally poor mainly in west.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
