About Bind Plugin development

[Chunhui Ouyang]

I see it, but I still have two questions:

1. The client says there might be hundreds of thousands of IPs that need to be matched, so I need a convenient process to match these addresses.

2. Can you tell me how to write RPZ entries?

* Ondřej Surý <ondrej at isc.org> [2025-11-22 :38:03]:

> I already gave you the links to the documentation and the tutorial below. Have you looked at these?
> 
> --
> Ondřej Surý (He/Him)
> ondrej at isc.org
> 
> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> 
> > On 22. 11. 2025, at 15:40, Chunhui Ouyang <jack9603301 at 163.com> wrote:
> > 
> > Can you give me an example?
> > 
> > * Ondřej Surý <ondrej at isc.org> [2025-11-22 :34:48]:
> > 
> >> RPZ already has the functionality that you’ve described below. There’s no need to write a new plugin for this.
> >> 
> >> Ondrej
> >> --
> >> Ondřej Surý — ISC (He/Him)
> >> 
> >> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> >> 
> >>> On 22. 11. 2025, at 14:43, Chunhui Ouyang <jack9603301 at 163.com> wrote:
> >>> 
> >>> What's the meaning?
> >>> 
> >>> * Ondřej Surý <ondrej at isc.org> [2025-11-22 :25:08]:
> >>> 
> >>>> Sorry, actually, not RPZ-CLIENT-IP, it is just RPZ-IP triggering rule.
> >>>> 
> >>>> Ondrej
> >>>> --
> >>>> Ondřej Surý (He/Him)
> >>>> ondrej at isc.org
> >>>> 
> >>>> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> >>>> 
> >>>>>> On 22. 11. 2025, at 14:22, Ondřej Surý <ondrej at isc.org> wrote:
> >>>>> 
> >>>>>> It will filter DNS resolution requests and match the IP record of any domain name against a given list; if a match is found, it will force the return of the given IP.
> >>>>> 
> >>>>> 
> >>>>> You mean like RPZ-CLIENT-IP?
> >>>>> 
> >>>>> https://www.isc.org/rpz/
> >>>>> and
> >>>>> https://www.isc.org/docs/BIND_RPZ.pdf
> >>>>> 
> >>>>> ?
> >>>>> 
> >>>>> Ondrej
> >>>>> --
> >>>>> Ondřej Surý (He/Him)
> >>>>> ondrej at isc.org
> >>>>> 
> >>>>> My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> >>>>> 
> >>>> 
> >>> <signature.asc>
> >> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20251123/7b65dc93/attachment-0001.sig>