Re: RPZ behavior for authoritative servers

2019-10-24 Thread Mik J via bind-users
Hello Chuck,Thank you for this clarification.I get your point and it makes sense.Regards Le jeudi 24 octobre 2019 à 05:38:03 UTC+2, Chuck Aurora a écrit : On 2019-10-23 18:14, Mik J via bind-users wrote: Hi, > I know that the RPZ functionality aims to block/redirect/log DNS >

Re: Internal CNAME in RPZ

2019-10-24 Thread Andrey Geyn
Thank you, Bob. Unfortunately, records are generated by my users, not by me, so I can't change them as I want. Thanks again for your time and detailed explanation. Andrey. 24.10.2019, 19:53, "Bob Harold" : > On Thu, Oct 24, 2019 at 9:20 AM Andrey Geyn wrote: >> Hi, Bob, thank you for

Re: Internal CNAME in RPZ

2019-10-24 Thread Bob Harold
On Thu, Oct 24, 2019 at 9:20 AM Andrey Geyn wrote: > Hi, Bob, thank you for response! > > What if I want to make following configuration (as an example): > > domain.comA10.10.10.10 > *.domain.com CNAMEdomain.com > > I don't want to write 10.10.10.10 twice, I want to use magic of

Re: Internal CNAME in RPZ

2019-10-24 Thread Andrey Geyn
Hi, Bob, thank you for response! What if I want to make following configuration (as an example): domain.com    A    10.10.10.10*.domain.com  CNAME    domain.com I don't want to write 10.10.10.10 twice, I want to use magic of CNAME's here. > Do you want cname.domain.com to point to 10.10.10.10? 

Re: Internal CNAME in RPZ

2019-10-24 Thread Bob Harold
On Wed, Oct 23, 2019 at 10:34 AM Andrey Geyn wrote: > Hello, I would like to set up RPZ with CNAME and A. There are two options: > > 1. > cname.domain.comCNAME test.domain.com(without trailing dot) > test.domain.com A 10.10.10.10 > There is a misunderstanding here.

Re: Internal CNAME in RPZ

2019-10-24 Thread Андрей Гейн
I enabled debug and query logs for BIND and no, it's not look like caching problems... Do you have any idea how to force BIND look for CNAMEd name in RPZ? I tried to analyze source codes, and it seems that this line prohibits to apply policy on the second iteration: