Information about dnsrps, fastRPZ and similar modules

Jesus Cea jcea at jcea.es
Thu Jun 13 21:52:29 UTC 2024


Investigating about non trivial RPZ configurations, I noticed a huge 
block on bind 9.12 to provide DNSRPS, an API for external RPZ providers. 
Nevertheless, the code is complicated and there is no documentation. 
Checking around I only found a RPZ module provided by the same people 
people that implemented the api: FastRPZ. That module is not open source.

I wrote to the company, but it was bought by another one and the 
original email address is bouncing. According to this recently archived 
webpage (a year ago) 
<https://web.archive.org/web/20230213175944/https://www.farsightsecurity.com/technical/fastrpz/>, 
I saw this:

"""
If you have a current BIND Support Subscription, you may be eligible to 
get FastRPZ free of charge. Please contact ISC Support to request access 
to FastRPZ.
"""

Any information? Any alternative?

Any other module using DNSRPS?. Any documentation at all?

Thanks.

PS: Apparently the configuration of this mailing list is not compatible 
with DMARC. Please, configure the mailing list to be compatible. You are 
using mailman, I manage several mailman mailing lists myself. In the 
administrative interface, go to "privacy options -> sender filters" and 
check out DMARC options. Most of mailing list admins set it to "Munge from".

-- 
Jesús Cea Avión                         _/_/      _/_/_/        _/_/_/
jcea at jcea.es - https://www.jcea.es/    _/_/    _/_/  _/_/    _/_/  _/_/
Twitter: @jcea                        _/_/    _/_/          _/_/_/_/_/
jabber / xmpp:jcea at jabber.org  _/_/  _/_/    _/_/          _/_/  _/_/
"Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
"My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz


More information about the bind-users mailing list