response-policy zones from spamhaus.org
Tony Finch
dot at dotat.at
Mon Oct 9 10:08:47 UTC 2017
MAYER Hans <Hans.Mayer at iiasa.ac.at> wrote:
>
> I also tried to define these records in my own RPZ and hoping it has
> higher priorities.
It should work if you put your passthru RPZ before any blocking RPZs.
A tangential aside...
The ordering in a response-policy section can affect performance, as well
as which policies take priority. I set `qname-wait-recurse no`, and I list
RPZs that do not require recursion (because they only contain `qname` and
`rpz-client-ip` triggers) before RPZs with unrestricted triggers.
Tony.
--
f.anthony.n.finch <dot at dotat.at> http://dotat.at/ - I xn--zr8h punycode
Fitzroy: Easterly or northeasterly 4 or 5 in southeast, otherwise variable 3
or 4. Slight or moderate. Fair. Good.
More information about the bind-users
mailing list