Obfuscating SOA information in RPZ

John W. Blue john.blue at rrcic.com
Fri Nov 29 13:51:12 UTC 2019


What does the complaint look like?  Is it preventing this industrial machine from doing its job?

John

Sent from Nine<http://www.9folders.com/>
________________________________
From: Ict Security <ict.security.job at gmail.com>
Sent: Nov 29, 2019 7:18 AM
To: bind-users at lists.isc.org
Subject: Obfuscating SOA information in RPZ

Dear guys,

we use RPZ zone in Bind 9 to protect some users against possible
malwares and to force Google safe search changing resolution to
Google's safe IP address server.

We have an industrial machine which, for some reason, if "complaining"
about the SOA information, visible in the additional info of the DNS
query.

Is it possible to obfuscate/remove the SOA information for a specific RPZ zone?

Thank you so much,
Frank
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20191129/e06454ec/attachment.htm>


More information about the bind-users mailing list