RE: RPZ answer me NXDOMAIN for some domain

2023-03-22 Thread BONIN Nathanael
> That's something that's impossible to answer without seeing the full > configuration (named-checkconf -px). The full config here : https://pastebin.com/CwWFq73G Thanks. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel

RE: RPZ answer me NXDOMAIN for some domain

2023-03-22 Thread BONIN Nathanael
j Surý Envoyé : mercredi 22 mars 2023 14:12 À : BONIN Nathanael Cc : bind-users@lists.isc.org Objet : Re: RPZ answer me NXDOMAIN for some domain Hi, look for break-dnssec in https://bind9.readthedocs.io/en/stable/reference.html#response-policy-zone-rpz-rewriting -- Ondřej Surý — ISC (He/Him) My w

RPZ answer me NXDOMAIN for some domain

2023-03-22 Thread BONIN Nathanael
Hi there, We are using RPZ zone for some times now, but recently we found a weird behavior from some domains. Let me explain ! We have 2 NS server : Recursive one (let's call him SrvA) and one bebind (let's call him SrvB, with global forwarder : SrvA ). My RPZ zone is on SrvA. If we took a