Hello, we have lots of internal extra zones on our dns for development overrides.
I came across RPZ in bind, which looks interesting to us because we could drop tons of extra zones and put everything in a rpz-development-override zone file. I tried RPZ and i can successfully put in an A record or CNAME pointing to "any" IP or FQHN. We use lot`s of CNAME aliasses for server virtual host name aliasses, i.e. myserver IN A 1.2.3.4 myserver-vhost1 IN CNAME myserver. myserver-vhost2 IN CNAME myserver. myserver-vhost3 IN CNAME myserver. How can we do that with RPZ ? Apparentyl I can use A records and CNAME in RPZ zone file, but as soon as i create a CNAME which points to an A-record within the RPZ Zone file, it doesn`t resolve : rpz-zonefile: <snipp> www.this-is-a-test.de CNAME www.google.de. www.this-is-another-test.de A 1.2.3.4 www.this-doesnt-work.de CNAME www.this-is-another-test.de. # nslookup www.this-is-a-test.de Server: 127.0.0.1 Address: 127.0.0.1#53 Non-authoritative answer: www.this-is-a-test.de canonical name = www.google.de. Name: www.google.de Address: 172.217.18.3 # nslookup www.this-is-another-test.de Server: 127.0.0.1 Address: 127.0.0.1#53 Non-authoritative answer: Name: www.this-is-another-test.de Address: 1.2.3.4 # nslookup www.this-doesnt-work.de Server: 127.0.0.1 Address: 127.0.0.1#53 ** server can't find www.this-doesnt-work.de: NXDOMAIN May 9 12:16:44 nameserverhost named[2902]: client 127.0.0.1#51602 (www.dies-ist-ein-test.de): rpz QNAME Local-Data rewrite www.this-is-a-test.de via www.this-is-a-test.de.rpz-development-overrides May 9 12:16:52 nameserverhost named[2902]: client 127.0.0.1#53888 (www.dies-ist-noch-ein-test.de): rpz QNAME Local-Data rewrite www.this-is-another-test.de via www.this-is-another-test.de.rpz-development-overrides May 9 12:16:59 nameserverhost named[2902]: client 127.0.0.1#37241 (www.wieso-funktioniert-das-nicht.de): rpz QNAME Local-Data rewrite www.this-doesnt-work.de via www.this-doesnt-work.de.rpz-development-overrides regards roland _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
