Am 13.02.20 um 20:51 schrieb A. Schulze via Unbound-users:
> it's late here. rpz testing will happen tomorrow :-)

I was able to write a simple RPZ using 
https://tools.ietf.org/html/draft-ietf-dnsop-dns-rpz-00#page-6
Maybe a sample zone could be included in documentation.

A Question on "module-config":

The default is usually "validator iterator". To enable rpz, docs say "respip 
validator iterator" should be used.
That work. But I had enabled the module "subnetcache" for testing purposes, too.

Now, unbound-checkconf fail for
  module-config: "respip subnetcache validator iterator" and also
  module-config: "subnetcache respip validator iterator"

but again: unbound itself do start with both versions. Which one should be used?

Andreas

Reply via email to