Re: refused rcode is not working RPZ?

2016-11-17 Thread Phil Mayers
On 17/11/16 02:29, LEE SUKMOON wrote: This domain causes many recursive query. And client received late SERVFAIL response. I want to quickly response "*.jifr.net". I want to solve this problem using RPZ. See "qname-wait-recurse" in the bind ARM. This will apply policy to the query for

RE: refused rcode is not working RPZ?

2016-11-16 Thread LEE SUKMOON
> On 17/11/2016 10:20, LEE SUKMOON wrote: > > > I want to response NXDOMAIN. > > Is it a solution this case? > > You'd usually get SERVFAIL from the recursor because the domain is > misconfigured with a lame delegation, and either way the client won't > get an answer. > > Is there a particular