Re: RPZ question autoritative/recursive servers

2019-01-22 Thread Tony Finch
Mik J via bind-users wrote: > For a zone that I owned, the "recursive" servers forwards the request to > the authoritative server. Beware: when you are forwarding the target server must be a recursive server. If you want to "forward" to an authoritative-only server, you must use "static-stub"

Re: RPZ question autoritative/recursive servers

2019-01-22 Thread Bob Harold
On Tue, Jan 22, 2019 at 9:41 AM Mik J via bind-users < bind-users@lists.isc.org> wrote: > Hello, > > I tried to dissociate roles and have: > - 1 set of authoritative master/slave server > - 1 set of recursive servers > > For a zone that I owned, the "recursive" servers forwards the request to >

Re: RPZ Question

2015-04-29 Thread Bob McDonald
I have not yet received an answer to my query. It appears that when using RPZ to return bogus addresses it will respond to queries for CNAME, MX, and SRV records. However, if the target name of those records is expected to resolve outside of RPZ, then the name needs to be terminated with a period

Re: RPZ Question

2015-04-16 Thread Mukund Sivaraman
Hi Bob On Thu, Apr 16, 2015 at 12:26:41PM -0500, Bob McDonald wrote: I'm using RPZ to return fake addresses for hosts. Although it seems to work well for A records, I'm questioning the way it processes CNAME records. Shown below is the output from DIG. Both records are in RPZ. However,

Re: RPZ Question

2015-04-16 Thread Bob McDonald
Requested information: options { directory /opt/incontrol/dns/db; allow-query { 127.0.0.1; rfc1918-nets; }; also-notify { 172.26.100.10 port 5053 ; 172.26.100.11 ; }; listen-on { 127.0.0.1; }; listen-on { 172.26.99.160; }; listen-on-v6 { none; }; masterfile-format