Whitelisting sites using RPZ

Daniel Stirnimann daniel.stirnimann at switch.ch
Thu Apr 26 07:53:00 UTC 2018

On 26.04.18 09:46, Blason R wrote:
> Oh thats great...in that case general practice would be always whitelist
> the zones first then blacklist?

I'm using:

whitelist with "policy passthru log no"
test zones with "policy passthru"
blacklists with "policy cname LANDINGPAGE"

Note, "[ log yes_or_no ]" has been added in BIND 9.12.


More information about the bind-users mailing list