Re: Whitelisting sites using RPZ

2018-04-25 Thread Daniel Stirnimann
> response-policy { zone "malware.trap"; zone "whitelist.allow"  policy > passthru; }; ... > So which one will take precendence in this case? Policy processing will search the zone files in the order in which they appear in the response-policy statement. So, you need to change the order in your

Whitelisting sites using RPZ

2018-04-25 Thread Blason R
Hi team, In RPZ since we can build up to 32 zones can I create blacklist and whitelist policies like this? response-policy { zone "malware.trap"; zone "whitelist.allow" policy passthru; }; zone "malware.trap" { type master; file "/etc/bind/malware.trap.db"; }; zone "wh

Re: Fwd: Facing weird issue with DNS-RPZ

2018-04-25 Thread Blason R
I do not have IPv6 disable its just a plain CentOS where I am compiling. Thanks for the info though. On Thu, Apr 26, 2018 at 2:32 AM, Carl Byington wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On Wed, 2018-04-25 at 19:30 +0530, Blason R wrote: > > I tried that couple of times

Re: Fwd: Facing weird issue with DNS-RPZ

2018-04-25 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wed, 2018-04-25 at 19:30 +0530, Blason R wrote: > I tried that couple of times on CentOS and it fails :(. http://www.five-ten-sg.com/mapper/bind I just updated the instructions. It looks like the built-in tests (that are normally run as part of

Re: Fwd: Facing weird issue with DNS-RPZ

2018-04-25 Thread Blason R
Hey, I tried that couple of times on CentOS and it fails :(. I would really appreciate if someone has already compiled RPM and can share it? On Wed, Apr 25, 2018 at 11:52 AM, G.W. Haywood via bind-users < bind-users@lists.isc.org> wrote: > Hi there, > > On Wed, 25 Apr 2018, Blason R wrote: > >

Re: Upgrade from 9.9.11 to 9.11.3 on Windows 2012

2018-04-25 Thread Magnus Olofsson
Solved. My problem was caused by an old named.root file. -- Sent from: http://bind-users-forum.2342410.n4.nabble.com/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@