Re: About Bind Plugin development

Chunhui Ouyang <[email protected]> Sun, 23 Nov 2025 00:15:48 +0800
Newsgroups	gmane.network.dns.bind.user
Message-ID	<aSHhtMmCcq4hZ2mw@JACK-PC>
I see it, but I still have two questions:

1. The client says there might be hundreds of thousands of IPs that need to be matched, so I need a convenient process to match these addresses.

2. Can you tell me how to write RPZ entries?

* Ondřej Surý <[email protected]> [2025-11-22 :38:03]:

> I already gave you the links to the documentation and the tutorial below. Have you looked at these?
> 
> --
> Ondřej Surý (He/Him)
> [email protected]
> 
> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> 
> > On 22. 11. 2025, at 15:40, Chunhui Ouyang <[email protected]> wrote:
> > 
> > Can you give me an example?
> > 
> > * Ondřej Surý <[email protected]> [2025-11-22 :34:48]:
> > 
> >> RPZ already has the functionality that you’ve described below. There’s no need to write a new plugin for this.
> >> 
> >> Ondrej
> >> --
> >> Ondřej Surý — ISC (He/Him)
> >> 
> >> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> >> 
> >>> On 22. 11. 2025, at 14:43, Chunhui Ouyang <[email protected]> wrote:
> >>> 
> >>> What's the meaning?
> >>> 
> >>> * Ondřej Surý <[email protected]> [2025-11-22 :25:08]:
> >>> 
> >>>> Sorry, actually, not RPZ-CLIENT-IP, it is just RPZ-IP triggering rule.
> >>>> 
> >>>> Ondrej
> >>>> --
> >>>> Ondřej Surý (He/Him)
> >>>> [email protected]
> >>>> 
> >>>> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> >>>> 
> >>>>>> On 22. 11. 2025, at 14:22, Ondřej Surý <[email protected]> wrote:
> >>>>> 
> >>>>>> It will filter DNS resolution requests and match the IP record of any domain name against a given list; if a match is found, it will force the return of the given IP.
> >>>>> 
> >>>>> 
> >>>>> You mean like RPZ-CLIENT-IP?
> >>>>> 
> >>>>> https://www.isc.org/rpz/
> >>>>> and
> >>>>> https://www.isc.org/docs/BIND_RPZ.pdf
> >>>>> 
> >>>>> ?
> >>>>> 
> >>>>> Ondrej
> >>>>> --
> >>>>> Ondřej Surý (He/Him)
> >>>>> [email protected]
> >>>>> 
> >>>>> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> >>>>> 
> >>>> 
> >>> <signature.asc>
> >> 
>

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
signature.asc (application/pgp-signature, 833 B)