Re: BIND-RPZ and Views

2016-09-19 Thread Tony Finch
Tom wrote: > > What is the supported/preferred way for implementing slave-rpz's in views? > I want to achieve, that view1 has a different policy-configuration (passthru, > given, nxdomain..) than the ones configured in view2 using the same > slave-rpz-files. If not obligatory, I would not synchron

Re: BIND-RPZ and Views

2016-09-19 Thread Tom
Hi What is the supported/preferred way for implementing slave-rpz's in views? I want to achieve, that view1 has a different policy-configuration (passthru, given, nxdomain..) than the ones configured in view2 using the same slave-rpz-files. If not obligatory, I would not synchronize/transfer t

Re: BIND-RPZ and Views

2016-09-16 Thread Tony Finch
Anand Buddhdev wrote: > > In newer versions of BIND, you cannot share a writable file in different > views. This is a bad configurtion, and newer versions of BIND reject it. > Just use different file names. To clarify, you couldn't in older versions of BIND either! It would cause weird data corru

Re: BIND-RPZ and Views

2016-09-16 Thread Anand Buddhdev
On 16/09/16 09:06, Tom wrote: Hi Tom, > Using BIND 9.10.4-P2: I've a question about configuring DNS-RPZ and views: > I configured view1 and view2. After configuring all rpz-zones in both > views, I had errors like this (slave file in view2 is already in use > from view1): > config: error: /etc/na