Re: Removal notice: Response Policy Server (BIND 9.21+)

2024-08-21 Thread Paul Vixie via bind-users
If that's how it worked then it was indeed an error. That was not Farsight's goal or my understanding. In any case RPZ no longer needs special code from anywhere and I share your joy about that. p vixie On Aug 21, 2024 00:55, Ondřej Surý wrote: No, it didn’t work with any policy. The feat

Re: Removal notice: Response Policy Server (BIND 9.21+)

2024-08-21 Thread Ondřej Surý
No, it didn’t work with any policy. The feature required librpz.so that was a binary blob provided to Farsight customers. It was wrong to accept this code into BIND 9 in the first place. BIND 9 already had working RPZ implementation and the effort would be better spent on improving RPZ for every

Re: Removal notice: Response Policy Server (BIND 9.21+)

2024-08-21 Thread Paul Vixie via bind-users
It worked with any policy source not just Farsight. However, is no longer necessary since isc now has a native RPZ implementation. Thanks for that. p vixie On Aug 20, 2024 23:55, Ondřej Surý wrote: Hello, In line with ISC's deprecation policy, I am notifying the mailing list of our intent

Removal notice: Response Policy Server (BIND 9.21+)

2024-08-20 Thread Ondřej Surý
Hello, In line with ISC's deprecation policy, I am notifying the mailing list of our intent to remove support for Response-Policy Server support. Back in 2018, Farsight Security[1] contributed a patch to BIND that was an optional replacement to our native RPZ implementation. At that time, our RPZ