Thanks, and what about for entire CIDR blocks? Is there a shorthand for entire *.10.in-addr space?
> addAction("10.0.0.0/8", DropAction()) > showRules() # Matches Rule Action 0 0 Src: 10.0.0.0/8 drop Here it wants to match the source of the query, but I'm interested in blocking the destination lookup. I tried this but it does not block the request. > addAction('*.10.in-addr.arpa', DropAction()) > showRules() # Matches Rule Action 0 0 qname==*.10.in-addr.arpa. drop Thanks! On Fri, Aug 3, 2018 at 4:18 AM, Remi Gacogne <remi.gaco...@powerdns.com> wrote: > Hi Jonathan, > > On 08/02/2018 11:09 PM, Jonathan Reed wrote: > > The docs say to drop lookups for domains like this > > > > addAction('example.com', DropAction()) > > > > > > Is this also the best way to drop reverse lookups? > > > > addAction('1.1.10.in-addr.arpa', DropAction()) > > Yes, that's probably the easiest way to do it. > > > Best regards, > -- > Remi Gacogne > PowerDNS.COM BV - https://www.powerdns.com/ > > > _______________________________________________ > dnsdist mailing list > dnsdist@mailman.powerdns.com > https://mailman.powerdns.com/mailman/listinfo/dnsdist > >
_______________________________________________ dnsdist mailing list dnsdist@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/dnsdist