Re: scripts-to-block-domains

2020-07-14 Thread Daniel Stirnimann
Hello Mohammed, I don't see that you specified a "response-policy" [1] statement. You need something like this as well: response-policy { zone "rpz.local" policy given; } // Apply RPZ policy to DNSSEC signed zones break-dnssec yes ; [1]

Re: scripts-to-block-domains

2020-07-14 Thread @lbutlr
On 14 Jul 2020, at 00:31, MEjaz wrote: > Please do not post images. Copy and paste the text. (Over 100 lines of quoted lines with no content deleted) -- I WILL NOT BARF UNLESS I'M SICK Bart chalkboard Ep. 8F15 ___ Please visit

RE: scripts-to-block-domains

2020-07-14 Thread MEjaz
Thanks for your quick response, I did that here is the statement in option section. -Original Message- From: Daniel Stirnimann [mailto:daniel.stirnim...@switch.ch] Sent: Tuesday, July 14, 2020 9:25 AM To: MEjaz ; bind-users@lists.isc.org Subject: Re:

RE: scripts-to-block-domains

2020-07-14 Thread MEjaz
Hello all, Thanks for every one's contribution. I use RPZ and listed 5000 forged domain to block it in a particular zone without having addiotnal zones, I hope that's the feature of RPZ, Seems good. Below is snippet for your review for the zone and file db.rpz.local which was

RE: scripts-to-block-domains

2020-07-14 Thread MEjaz
Ok, I will take care next time will -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of @lbutlr Sent: Tuesday, July 14, 2020 10:28 AM To: bind-users Subject: Re: scripts-to-block-domains On 14 Jul 2020, at 00:31, MEjaz wrote: > Please do not

Re: Dynamic update rejected within a view

2020-07-14 Thread Mark Andrews
Include the update keys in the view selection. -- Mark Andrews > On 14 Jul 2020, at 23:06, Per Weisteen wrote: > >  Hi > > I've a BIND setup with my ISP with two views, one external and one internal. > At the same time I also need to be able to do a dynamic update from some > addresses

Re: Dynamic update rejected within a view

2020-07-14 Thread Zhiyong Cheng
在 2020年7月14日 +0800 PM9:06,Per Weisteen ,写道: > Hi > > I've a BIND setup with my ISP with two views, one external and one internal. > At the same time I also need to be able to do a dynamic update from some > addresses within the internal range. This worked ok before I had to define my > two

Dynamic update rejected within a view

2020-07-14 Thread Per Weisteen
Hi I've a BIND setup with my ISP with two views, one external and one internal. At the same time I also need to be able to do a dynamic update from some addresses within the internal range. This worked ok before I had to define my two views. I'd be very grateful if someone could suggest

Re: Dynamic update rejected within a view

2020-07-14 Thread Sten Carlsen
-- Best regards Sten Carlsen For every problem, there is a solution that is simple, elegant, and wrong. HL Mencken > On 14 Jul 2020, at 16.25, Mark Andrews wrote: > > Include the update keys in the view selection. > > -- > Mark Andrews > >> On 14 Jul 2020, at 23:06, Per Weisteen

Re: scripts-to-block-domains

2020-07-14 Thread Grant Taylor via bind-users
On 7/14/20 12:08 AM, MEjaz wrote: Thanks for every one’s  contribution.  I use RPZ and listed 5000  forged domain to block it in  a particular zone  without having addiotnal zones, I hope that’s the feature of  RPZ, Seems good. You might want to look through those domains and see if there are