Using a DLZ as RPZ?

Jesus Cea <[email protected]> Sat, 29 Nov 2025 04:33:48 +0100
Newsgroups gmane.network.dns.bind.user
Message-ID <[email protected]>
Hi there.

I wrote a DLZ module and it is working fairly well and fast (no database 
requests, everything is in RAM running bloom filters).

I configured my named (9.18.42) to use that DLZ as a RPZ database and... 
nothing happens. Apparently my DLZ is not called at all.

Before digging in the source code and trying to debug this, I would like 
to be sure that what I want to do can be actually done. I get no 
warning/error with my configuration. Something like:

"""
options {
...
   response-policy {
     zone "z";
   };
};

dlz "jcea-dlz" {
   database "dlopen /home/jcea-dlz.so";
   search no;
};

zone "z" {
   type primary;
   file "DUMMY";
   dlz jcea-dlz;
};
"""

I see accesses to my DLZ when querying the domain "z", as expected, but 
no when requesting foreign domains that I expect to be used as RPZ.

I have defined a "rpz" log channel with "debug 99" and the file is 
created but with zero size, apparently the RPZ is not used at all.

So I would like to know if my configuration can be corrected or DLZ 
simply can not be used as RPZ, at all.

Running 9.18.42.

Thanks!

-- 
Jesús Cea Avión                         _/_/      _/_/_/        _/_/_/
[email protected] - https://www.jcea.es/    _/_/    _/_/  _/_/    _/_/  _/_/
Twitter: @jcea                        _/_/    _/_/          _/_/_/_/_/
jabber / xmpp:[email protected]  _/_/  _/_/    _/_/          _/_/  _/_/
"Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
"My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
OpenPGP_signature (application/pgp-signature, 495 B) - not displayed