Re: nsupdate with RPZ

2018-05-23 Thread Blason R
Well, thanks for the update. Later I managed to resolve it but issue is;
since this is RPZ a zone and RR are difference hence I dont think nsupdate
would solve my purpose here?

Like zone test.update while RR is

block.this.domain  CNAME  wg.test.update.

Please correct me if I am wrong.

On Wed, May 23, 2018 at 8:43 PM, Chris Buxton <cli...@buxtonfamily.us>
wrote:

> On May 22, 2018, at 7:35 PM, Blason R <blaso...@gmail.com> wrote:
>
> > Wondering if anyone have a working How-To guide for implementing
> nsupdate with RPZ? I mean do we need to configure any specific settings in
> zone of Options?
>
> A response policy zone is a zone like any other. You would normally
> restrict access to query it, but if you want to allow some system to manage
> the content of that zone dynamically, go ahead and set up an allow-update
> (or update-policy, if that's what you need) on that zone. Just make sure
> the updater is also allowed to query the zone.
>
> If that's not your use case, tell us what your use case is in more detail
> and perhaps the list can help.
>
> Chris Buxton
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: nsupdate with RPZ

2018-05-23 Thread Chris Buxton
On May 22, 2018, at 7:35 PM, Blason R <blaso...@gmail.com> wrote:

> Wondering if anyone have a working How-To guide for implementing nsupdate 
> with RPZ? I mean do we need to configure any specific settings in zone of 
> Options?

A response policy zone is a zone like any other. You would normally restrict 
access to query it, but if you want to allow some system to manage the content 
of that zone dynamically, go ahead and set up an allow-update (or 
update-policy, if that's what you need) on that zone. Just make sure the 
updater is also allowed to query the zone.

If that's not your use case, tell us what your use case is in more detail and 
perhaps the list can help.

Chris Buxton
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


nsupdate with RPZ

2018-05-22 Thread Blason R
Hi Team,

Wondering if anyone have a working How-To guide for implementing nsupdate
with RPZ? I mean do we need to configure any specific settings in zone of
Options?

Please advise

TIA
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users