RPZ rule to apply to NS record requests?

2021-11-15 Thread John Thurston
If I have a Reverse Policy Zone (RPZ) defined, I can define a specific 
answer to be sent for a specific record-type for a specific name:


   foo.bar.com  IN  A  10.11.12.13
   foo.bar.com  IN TXT "Hello World"

But I can't seen to define one for the record-type NS

Is this possible?


--
--
Do things because you should, not just because you can.

John Thurston907-465-8591
john.thurs...@alaska.gov
Department of Administration
State of Alaska
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: ERROR: Failed to create fetch for DNSKEY update

2021-11-15 Thread Peter

On Mon, Nov 15, 2021 at 09:14:19AM +0100, Ondřej Surý wrote:
! > On 15. 11. 2021, at 3:41, Peter  wrote:   
 
! > 
! > Wondering   
! > * WHAT is broken?   
! > * Why does it happen only to me?
!   
! We can’t really help you if you don’t share any details of your installation  
! and configuration (hint: You can use `named-checkconf -px` to scrub the   
! configuration).   
!
! So far, you shared a **single line** from the log and nothing else.   


Yes, certainly, since You do not allow more to be sent.


When I try to send log or config data, I only get this in reply:


   - The following addresses had permanent fatal errors -   

(reason: 550 5.7.1 Blocked by SpamAssassin) 
  
(reason: 550 5.7.1 Blocked by SpamAssassin) 

   - Transcript of session follows -
... while talking to mx.pao1.isc.org.:  
>>> DATA
<<< 550 5.7.1 Blocked by SpamAssassin   
554 5.0.0 Service unavailable   


cheerio,
PMc
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: ERROR: Failed to create fetch for DNSKEY update

2021-11-15 Thread Ondřej Surý
> On 15. 11. 2021, at 3:41, Peter  wrote:
> 
> Wondering
> * WHAT is broken?
> * Why does it happen only to me?

We can’t really help you if you don’t share any details of your installation
and configuration (hint: You can use `named-checkconf -px` to scrub the
configuration).

So far, you shared a **single line** from the log and nothing else.

Ondrej
--
Ondřej Surý (He/Him)
ond...@isc.org

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users