RPZ-zone and AAAA queries

Tony Finch dot at dotat.at
Mon Mar 26 11:01:43 UTC 2018


Job <Job at colliniconsulting.it> wrote:
>
> is there a way to avoid RPZ answering to "AAAA" queries, leaving the
> reply only for A queries?

I'm afraid not. The policy triggers are:

RPZ-CLIENT-IP
QNAME
RPZ-IP
RPZ-NSDNAME
RPZ-NSIP

i.e. there isn't a trigger that matches both QNAME and QTYPE.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Irish Sea: South 4, increasing 5 to 7, then veering west later. Slight or
moderate. Rain at times. Good, occasionally poor.


More information about the bind-users mailing list