Hi Spike,

Just wanted to add a small comment:

On 15/12/16 05:04, Spike via Unbound-users wrote:
> unfortunately in some cases I need inverted regexps/whitelists, for
> example allow sub.domain.tld but otherwise block *.domain.tld. As far as
> I could see you can't do that with local-data.

Yes this is possible, with
local-zone: "domain.tld" static
local-zone: "sub.domain.tld" transparent

The most specific match is used.  The sub.domain.tld resolves normally.
But other queries, like foo.domain.tld, get NXDOMAIN.

Best regards, Wouter

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to