CIDR notation for RPZ rpz-ip ?

J Doe general at nativemethods.com
Fri May 17 21:11:31 UTC 2024


Hello,

When using RPZ with BIND 9.18.27 and rpz-ip, can any CIDR prefix be used
or must they be either: /8, /16, /24, /32 for IPv4 ?

For example, if I want to block records with an A address of
192.168.10.1, I know I can write:

     32.1.10.168.192.rpz-ip        IN    CNAME .

... and records like A, MX, etc. that have an A value of: 192.168.10.1
will receive a NXDOMAIN response.

But am I able to block any CIDR ?  For instance, if I wanted to block
records like A, MX, etc. that have A values in: 192.168.10.1/22 can I
use the following:

     22.1.10.168.192.rpz-ip        IN    CNAME .


Thanks,

- J


More information about the bind-users mailing list