On 12/2/21 9:59 AM, Fred Morris wrote:
Hello, Rear View RPZ (https://github.com/m3047/rear_view_rpz) is now generally available: turn your local BIND resolver into a network investigation enabler with locally generated PTR records.
Would you please elaborate on what Rear View RPZ does?It seems as if it synthetically fabricates PTR records (which are served via RPZ) with some additional information for subsequent use by investigators.
If that is correct, please provide an example of the original PTR and the synthetic augmented PTR.
Aside: Creative use and combination of DNSTap and RPZ. <ASCII thumbs up> -- Grant. . . . unix || die
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
