Re: Rewrite/Override QTYPE with RPZ

2018-11-11 Thread Tom
Hi Daniel Thank you for your feedback. This could be a solution. It seems, that unbound can do this (not verified) and BIND-RPZ can't do this actually: https://serverfault.com/questions/18748/overriding-some-dns-entries-in-bind-for-internal-networks Any plans for BIND? Tom On 12.11.18 08:1

Re: Rewrite/Override QTYPE with RPZ

2018-11-11 Thread Daniel Stirnimann
Hello Tom, > My feeded RPZ blocks othercompany.com and *.othercompany.com. Therefore > any qtype (MX, A, ...) are blocked for this domain. Is there a way > with BIND just to whitelist the MX for othercompany.com and the > consequent A-Record (ex. mail.othercompany.com) that we are able to s

Re: Rewrite/Override QTYPE with RPZ

2018-11-11 Thread Tom
I mean the other way: My feeded RPZ blocks othercompany.com and *.othercompany.com. Therefore any qtype (MX, A, ...) are blocked for this domain. Is there a way with BIND just to whitelist the MX for othercompany.com and the consequent A-Record (ex. mail.othercompany.com) that we are able

Re: forwarder selection logic by bind9

2018-11-11 Thread Matus UHLAR - fantomas
On 10.11.18 15:59, József Lázár wrote: I'm wondering what the selection logic in bind for forwarders. I tried to look for this information in the official documentation but couldn't find it. Could you please describe it for me briefly? Actually, the scenario is that I have two DNS servers and I'