Re: use RPZ to override AAAA record

That’s the dig that comes with MacOS. The DNS servers I tested with are
FreeBSD at 9.20.*mumble*.

I was accessing the FreeBSD from the Mac and writing the email on the Mac.
I was using the “Screen Sharing” application, aka, VNC. But MacOS won’t let
you cut n paste from the Screen Sharing to other applications, so I
retyped, messed it up, and didn’t catch it before I hit send.

I had done the digs on my FreeBSD too, but since I couldn’t paste them from
Screen Sharing, I redid them in a Terminal window on the Mac and got the
ancient version in the output.


On Sat, Nov 8, 2025 at 12:10 PM Nick Tait via bind-users <
[email protected]> wrote:

> On 08/11/2025 13:11, Lee wrote:
>
> On Fri, Nov 7, 2025 at 3:53 PM Crist Clark wrote:
>
> I still don't understand why an RPZ entry of,
>
> 10.zz.fe80. IN CNAME *.
>
> Doesn't work for you.
>
> First
>
> DiG 9.10.6
>
> are you really running a 9.10 version of bind?!
>
> second,
> because it's missing rpz-ip?
>
> I've got
>
> ; return NXDOMAIN for any ipv6 link local address answer
> 10.zz.fe80.rpz-ip       CNAME   .       ;  FE80::/10
>
> and it doesn't work for me 🙁
>
> This works for me (BIND 9.20.11):
>
> 10.zz.fe80.rpz-ip IN CNAME *.
>
> (You need to rewrite using NODATA, rather than NXDOMAIN.)
>
> Nick.
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list.
>

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.