-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi Spike,
No unbound.conf doesn't have regexps in the local-zone strings. That is more like something a python module could do. Best regards, Wouter On 15/12/16 20:18, Spike wrote: > Brilliant, thank you Wouter for your insight, this is enough to get > us off of the python module at least on half of our instances. I've > clearly still much to learn about unbound and how to leverage its > power. > > For some other cases however in the python script I'm using simple > regexps and I'm wondering if there is any way to use wildcards in > the local-zone string. So, following from your example, could I do > something like: > > local-zone: "domain.tld" static local-zone: "www*.domain.tld" > transparent > > so that nothing resolves except www1.domain.tld, www2.domain.tld > etc. > > thanks, > > Spike > > On Thu, Dec 15, 2016 at 12:16 AM W.C.A. Wijngaards via > Unbound-users <[email protected] > <mailto:[email protected]>> wrote: > > Hi Spike, > > Just wanted to add a small comment: > > On 15/12/16 05:04, Spike via Unbound-users wrote: >> unfortunately in some cases I need inverted regexps/whitelists, >> for example allow sub.domain.tld but otherwise block >> *.domain.tld. As > far as >> I could see you can't do that with local-data. > > Yes this is possible, with local-zone: "domain.tld" static > local-zone: "sub.domain.tld" transparent > > The most specific match is used. The sub.domain.tld resolves > normally. But other queries, like foo.domain.tld, get NXDOMAIN. > > Best regards, Wouter > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYU590AAoJEJ9vHC1+BF+NXugQAImFApg5tkCAOcsSnPR90RjB WeA9IMK9gs8Zo/7kiSE3VDOCcTrnffs/n4RIKxnCOPvk+qGCX7+muX/y3v7n7Y/O Ik6Oqcy4P+xu36vP+HIXSsHcpOw9mzhFDbr3xN3728GIO87qbrHS7FK8DxqmpYhU kd4Mejbq/bDi06i8QYHnaADfFF01Lw4+wrT4BsTn3eTE2t7DGt3t+YCt2Ql+xcf3 3YIf5qOv7E4ZZzxEAt+pAKgyJpZ5LI5K3sMUwoMBYpRiz3cCQDROL98xnvFShmCC X5TrAuAgIYM/O5JxjVxX2jfFt3uCvDHKnJvKUod+R4Ge7KXDYFsoM5lQa9VMg7Ug 4xCAZD4ryXTHLzW8Rj6laxwVOpMHJBnx+siJtGqp/6tbc1wBI/mDxs7YBjVSrt7z ynpTp3PxIpNVVe+J9dQkQijOlm0633fEIx87B229inJrfQT0VHyP8ep+x++1jP2F M1QcPu0ReRPDqy8xwx/JM5+Oex1A/+FLp5wD0SWdJbt70DXy5hNhAYd8cKeR+zbw f2d5vilftLPaY8BEeA8cKiR1sjrs9b64wTmg+IKLw9jZ0t6YlLO1ZUx0NnhT3c+G 5Q7xzgG27KKQPB+TIIUtxgXXLRo306bw70MjeS1o7zT+iaeyzVDSJdxWPTOw3fiu gPZarGW/3Mj9n0IiX6TS =cnOn -----END PGP SIGNATURE-----
