BIND RPZ is not blocking A record

[Blason R]

Nah even that didn't work.

If I directly query to bind it blocks or wall garden the request but if I
send it through windows AD or any other server bind just forwards the
request to forwarders.

On Sat, Nov 16, 2024, 23:55 Lee <ler762 at gmail.com> wrote:

> Hi
>
> On Fri, Nov 15, 2024 at 10:24 PM Blason R wrote:
> >
> > Where is that exactly to be added? I added in response-policy
> > statement then I tired adding in options stanza but rndc fails
> > everytime.
> >
>   <.. snip ..>
>
> > > > > response-policy {
> > > > > zone "custom.block";
> > > > > ...
> > > > > ..
> > > > > }
> > > >
> > > > Try adding
> > > >
> > > >      break-dnssec yes
> > > >      recursive-only no
> > > >      qname-wait-recurse no;
> > > >
> > > > after the closing }
>
> Which would be
>
>  response-policy {
>    zone "custom.block";
>    ...
>    ..
>  }
>  break-dnssec yes
>  recursive-only no
>  qname-wait-recurse no;
>
> Regards,
> Lee
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20241117/ca7f920a/attachment.htm>