Re: ECS subnet

2025-03-27 Thread Rainer Duffner
> One follow-up question: it seems the IP is not shown in the RPZ log. Can this be adjusted? -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.

Re: ECS subnet

2025-03-27 Thread Rainer Duffner
> Am 25.02.2025 um 01:06 schrieb Evan Hunt : > > On Tue, Feb 18, 2025 at 08:40:53AM +0100, Rainer Duffner wrote: >>> ECS is not supported in the open source version of BIND so I guess >>> it might not get logged. > > The open source version doesn't *send* client-subnet requests, > or cache the r

Re: ECS subnet

2025-02-24 Thread Evan Hunt
On Tue, Feb 18, 2025 at 08:40:53AM +0100, Rainer Duffner wrote: > > ECS is not supported in the open source version of BIND so I guess > > it might not get logged. The open source version doesn't *send* client-subnet requests, or cache the responses differently depending on client-subnet data incl

Re: ECS subnet

2025-02-17 Thread Rainer Duffner
> Am 17.02.2025 um 18:00 schrieb Petr Špaček : > > ECS is not supported in the open source version of BIND so I guess it might > not get logged. What you can do is enable PROXYv2 support, assuming Unbound > supports it. Unfortunately, it looks like it doesn’t support it sending requests down

Re: ECS subnet

2025-02-17 Thread Carlos Horowicz via bind-users
Hi, you mean "edns-client-subnet yes;" in opensource bind9.18 right ?  ("unknown option 'edns-client-subnet'") -Carlos On 17/02/2025 18:00, Petr Špaček wrote: On 14. 02. 25 17:41, Rainer Duffner wrote: Am 14.02.2025 um 17:39 schrieb Greg Choules : Hi. Is this a question about BIND, or Unb

Re: ECS subnet

2025-02-17 Thread Petr Špaček
On 14. 02. 25 17:41, Rainer Duffner wrote: Am 14.02.2025 um 17:39 schrieb Greg Choules : Hi. Is this a question about BIND, or Unbound? Note the name of the list. No, it’s a question about BIND. If an upstream resolver sends an ECS subnet (it’s in the packet header somewhere, from what I

Re: ECS subnet

2025-02-14 Thread Rainer Duffner
> Am 14.02.2025 um 17:39 schrieb Greg Choules > : > > Hi. > Is this a question about BIND, or Unbound? > Note the name of the list. No, it’s a question about BIND. If an upstream resolver sends an ECS subnet (it’s in the packet header somewhere, from what I understand) - how can BIND show

Re: ECS subnet

2025-02-14 Thread Greg Choules via bind-users
Hi. Is this a question about BIND, or Unbound? Note the name of the list. On Fri, 14 Feb 2025 at 16:36, Rainer Duffner wrote: > Hi, > > I have a setup where I have a BIND resolver behind an unbound resolver. > > The reason is that when I originally set this up, there was no way to > integrate an