RPZ-zone and AAAA queries

2018-03-26 Thread Job
Hi,

is there a way to avoid RPZ answering to "" queries, leaving the reply only 
for A queries?
In my RPZ zone file, i have:

domain.abc A 1.2.3.4

I cannot understand why the reply - also - arrive for the  query.

Thank you!
F
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: RPZ-zone and AAAA queries

2018-03-26 Thread Tony Finch
Job  wrote:
>
> is there a way to avoid RPZ answering to "" queries, leaving the
> reply only for A queries?

I'm afraid not. The policy triggers are:

RPZ-CLIENT-IP
QNAME
RPZ-IP
RPZ-NSDNAME
RPZ-NSIP

i.e. there isn't a trigger that matches both QNAME and QTYPE.

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/  -  I xn--zr8h punycode
Irish Sea: South 4, increasing 5 to 7, then veering west later. Slight or
moderate. Rain at times. Good, occasionally poor.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


R: RPZ-zone and AAAA queries

2018-03-26 Thread Job
Hi Tony,

>>i.e. there isn't a trigger that matches both QNAME and QTYPE.

Ok, i understand, thank you.
Is it possible to specify a different answer for the  query instead than 
the A query?

Thank you again!
F


Da: Tony Finch [d...@dotat.at]
Inviato: lunedì 26 marzo 2018 13.01
A: Job
Cc: bind-users@lists.isc.org
Oggetto: Re: RPZ-zone and  queries

Job  wrote:
>
> is there a way to avoid RPZ answering to "" queries, leaving the
> reply only for A queries?

I'm afraid not. The policy triggers are:

RPZ-CLIENT-IP
QNAME
RPZ-IP
RPZ-NSDNAME
RPZ-NSIP

i.e. there isn't a trigger that matches both QNAME and QTYPE.

Tony.
--
f.anthony.n.finchhttp://dotat.at/  -  I xn--zr8h punycode
Irish Sea: South 4, increasing 5 to 7, then veering west later. Slight or
moderate. Rain at times. Good, occasionally poor.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: R: RPZ-zone and AAAA queries

2018-03-26 Thread Tony Finch
Job  wrote:

> Is it possible to specify a different answer for the  query instead
> than the A query?

Yes, see "local data" under
https://ftp.isc.org/isc/bind9/9.12.1/doc/arm/Bv9ARM.ch05.html#rpz

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/  -  I xn--zr8h punycode
Faeroes, Southeast Iceland: Easterly or southeasterly 6 to gale 8. Moderate or
rough, occasionally very rough. Occasional drizzle. Good, occasionally poor.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


R: R: RPZ-zone and AAAA queries

2018-03-26 Thread Job
Hi Tony,
thank you again!

Regarding:
Yes, see "local data" under
https://ftp.isc.org/isc/bind9/9.12.1/doc/arm/Bv9ARM.ch05.html#rpz

I tried but i did not understand how to create the "local data" policy only for 
.

Thank you!
F
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users