Re: DNSSEC + Split DNS

--===============0280910159221482583==
Content-Type: multipart/alternative; boundary="000000000000b614af064f0397bb"

--000000000000b614af064f0397bb
Content-Type: text/plain; charset="UTF-8"

>
> Response Policy Zone on the recursor is the way I'd do it. This is what
> RPZ is designed for: to override specific DNS answers.
>

I've used to do it with Bind Views in the past as i've had BIND running. As
i've migrated to Powerdns this generated some issues obviously since bind
view wasnt available then and it has to be done with LUA Records.

This historical thing with Shadow Records is something that is difficult to
clean up and fix for different reasons. And it regularly comes back and
bites me in the ass..

--000000000000b614af064f0397bb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_quote gmail_quote_container"><blockquo=
te class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px =
solid rgb(204,204,204);padding-left:1ex"><div><p>Response Policy Zone on th=
e recursor is the way I&#39;d do it. This
      is what RPZ is designed for: to override specific DNS answers.</p></d=
iv></blockquote><div>=C2=A0</div><div>I&#39;ve used to do it with Bind View=
s in the past as i&#39;ve=C2=A0had BIND running. As i&#39;ve migrated to Po=
werdns this generated some issues obviously=C2=A0since bind view wasnt=C2=
=A0available=C2=A0then and it has to be done with LUA Records.</div><div><b=
r></div><div>This historical thing with Shadow Records is something that is=
 difficult to clean up and fix for different reasons. And it regularly=C2=
=A0comes back and bites me in the ass..</div><div><br></div><div><br></div>=
<div><br></div><div><br></div><div>=C2=A0</div></div></div>

--000000000000b614af064f0397bb--

--===============0280910159221482583==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users

--===============0280910159221482583==--