Re: BIND RPZ is not blocking A record

2024-11-14 Thread Nick Tait via bind-users
Remember that when you update a zone you need to increase the serial number (in SOA record) and tell BIND to reload the zone - e.g. run “rndc reload”. Nick. > On 15 Nov 2024, at 6:30 PM, Blason R wrote: > > Even I tried that but still no luck > > $TTL 180 > @ IN SOA ns

Re: BIND RPZ is not blocking A record

2024-11-14 Thread Blason R
Even I tried that but still no luck $TTL 180 @ IN SOA ns1.custom.block. ns1.custom.block. ( 2006060301 21600 3600 604800 3600 ) IN NSns1.custom.block. ns1.custom.block. IN A 172.1.254.243 wg.custom.block.IN A 172.1.254.243 app.hubspot.com

Re: BIND RPZ is not blocking A record

2024-11-14 Thread Nick Tait via bind-users
On 14/11/2024 7:48 pm, Blason R wrote: And here is zone file $TTL 180 @ IN SOA ns1.custom.block. ns1.custom.block. ( 2006060301 21600 3600 604800 3600 ) IN NSns1.custom.block. ns1.custom.block. IN A 172.1.xx.xx wg.custom.block.IN A 172

Re: BIND RPZ is not blocking A record

2024-11-14 Thread Blason R
That's my nginx load balancer ip. Surprisingly this happens only with this domain. On Thu, Nov 14, 2024, 17:30 Peter Davies wrote: > Hi Blason, >Your configuration looks correct, though BIND will try to resolve the > "wg.custom.block" > through your forwarders. > > What reply do you get from

Re: BIND RPZ is not blocking A record

2024-11-14 Thread Peter Davies
Hi Blason, Your configuration looks correct, though BIND will try to resolve the "wg.custom.block" through your forwarders. What reply do you get from: dig @172.1.254.243 custom.block soa /Peter -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list