Using a DLZ as RPZ?
Jesus Cea <[email protected]> Sat, 29 Nov 2025 04:33:48 +0100
| Newsgroups | gmane.network.dns.bind.user |
|---|---|
| Message-ID | <[email protected]> |
Hi there.
I wrote a DLZ module and it is working fairly well and fast (no database
requests, everything is in RAM running bloom filters).
I configured my named (9.18.42) to use that DLZ as a RPZ database and...
nothing happens. Apparently my DLZ is not called at all.
Before digging in the source code and trying to debug this, I would like
to be sure that what I want to do can be actually done. I get no
warning/error with my configuration. Something like:
"""
options {
...
response-policy {
zone "z";
};
};
dlz "jcea-dlz" {
database "dlopen /home/jcea-dlz.so";
search no;
};
zone "z" {
type primary;
file "DUMMY";
dlz jcea-dlz;
};
"""
I see accesses to my DLZ when querying the domain "z", as expected, but
no when requesting foreign domains that I expect to be used as RPZ.
I have defined a "rpz" log channel with "debug 99" and the file is
created but with zero size, apparently the RPZ is not used at all.
So I would like to know if my configuration can be corrected or DLZ
simply can not be used as RPZ, at all.
Running 9.18.42.
Thanks!
--
Jesús Cea Avión _/_/ _/_/_/ _/_/_/
[email protected] - https://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/
Twitter: @jcea _/_/ _/_/ _/_/_/_/_/
jabber / xmpp:[email protected] _/_/ _/_/ _/_/ _/_/ _/_/
"Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
"My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
OpenPGP_signature
(application/pgp-signature, 495 B) - not displayed