Re: RPZ help on BIND

2013-12-28 Thread Chris Buxton
Babu Dheen,

The stanza you quoted will get you the zone. It appears to be correct syntax. 
If you’re using views, put this inside a view; otherwise, put it at the global 
level.

It will not create a response policy based on the zone. You have to do that 
yourself. Examples are in the BIND v9 Administrator Reference Manual, assuming 
your copy of the ARM is up to date and you’re using a relatively recent version 
of BIND.

The file ‘dbx.rpz.spamhaus.org' will contain a copy of the response policy 
zone. Again, configuring named to use this as the basis for a response policy 
requires extra configuration. I don’t know the purpose of this RPZ, so I can’t 
give you the exact syntax. Perhaps someone from Spamhaus can help you with that.

I don’t have enough context to answer your question about a whitelist. Perhaps 
someone else can help you with that.

Regards,
Chris Buxton

On Dec 23, 2013, at 5:11 AM, babu dheen babudh...@yahoo.co.in wrote:

 Dear All,
 
  My BIND DNS server is authorized to use spamhaus RPZ service and spamhaus 
 official team requested me to paste below configuration line in 
 /etc/named.conf file. Since i am new to RPZ and BIND, kindly help me to 
 enable this feature.
 
 
 zone rpz.spamhaus.org {
   type slave;
   file dbx.rpz.spamhaus.org;
masters { 199.168.90.51; 199.168.90.52; 199.168.90.53; };
   allow-transfer { none; };
allow-query { none; };
 };
 
 My question is:
 
 1. If i paste the above line alone in /etc/named.conf file will work?
 
 2. What will be the content of dbx.rpz.spamhaus.org file ?
 
 3. How to maintain the local whitelist policy?
 
 
 Regards
 Babudheen
 ___
 Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
 from this list
 
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: bad owner name - Unable to add forward map from Nintendo Wii U ... REFUSED

2013-12-28 Thread David C. Rankin
On 12/27/2013 08:56 AM, Phil Mayers wrote:
 On 27/12/13 11:16, Matus UHLAR - fantomas wrote:
 
 I would ask nintendo to produce a release...
 
 Ha ha ;o)
 
 No, the only realistic option here is to override the client DDNS hostname
 option with something sanitised. Since the client-supplied hostname isn't even
 unique, let alone sane, I would just throw it away and synthetise something 
 from
 the MAC address. The dhcpd man pages contain info on all the various options.
 
 

Phil, Barry, Matus, all,

  Thank you for your response. I'll just give it a host statement in dhcpd.conf
and assign a sane name. You guys have a happy new year and keep up the great 
work!

-- 
David C. Rankin, J.D.,P.E.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users