Re: rpz using a forward zone

2019-06-05 Thread Vadim Pavlov via bind-users
You can spin up a separate instance of bind (or use my opensource ioc2rpz dns server) to feed (via a zone transfer) the modified zone to your older bind instance. Vadim > On Jun 5, 2019, at 13:04, Mike Woods wrote: > > I was afraid that would be the answer, time to try some other solutions >

Re: rpz using a forward zone

2019-06-05 Thread Mike Woods
I was afraid that would be the answer, time to try some other solutions then. Thanks. On 05/06/2019 12:03, Tony Finch wrote: > Mike Woods wrote: >> >> So, the long and short of things, is it actually possible to point the >> response policy at a forward zone > > No, the RPZ zone file has to be

Re: rpz using a forward zone

2019-06-05 Thread Tony Finch
Mike Woods wrote: > > So, the long and short of things, is it actually possible to point the > response policy at a forward zone No, the RPZ zone file has to be present on the resolver. The RPZ is parsed into a special fast lookup data structure so that policies can be applied efficiently. Tony.

rpz using a forward zone

2019-06-05 Thread Mike Woods
Hi Guys, hopefully a pretty straightforward question for my first post to the list. We're trying to mitigate an issue with the spamhaus dbl list interrupting our internal dns service (and yes, I'm aware that this is a known issue and fixes exist in later builds but there are issues for us upda