<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt">Thanks Chris. Actually I am using latest version of BIND in RPM format downloaded from RHN. I just need to configure RPZ with customized blackhole IP address (manually defined) for domain accessing malware domain.<br><br>Regards<br>Babu<br><div><span><br></span></div><div style="display: block;" class="yahoo_quoted"> <br> <br> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> On Saturday, 28 December 2013 11:12 PM, Chris Buxton <clists@buxtonfamily.us> wrote:<br> </font> </div> <div class="y_msg_container"><div id="yiv1330197942"><div><div>Babu Dheen,</div><div><br clear="none"></div><div>The stanza you quoted will get you the zone. It appears to be correct
syntax. If you’re using views, put this inside a view; otherwise, put it at the global level.</div><div><br clear="none"></div><div>It will not create a response policy based on the zone. You have to do that yourself. Examples are in the BIND v9 Administrator Reference Manual, assuming your copy of the ARM is up to date and you’re using a relatively recent version of BIND.</div><div><br clear="none"></div><div>The file ‘<a rel="nofollow" shape="rect" target="_blank" href="http://dbx.rpz.spamhaus.org/">dbx.rpz.spamhaus.org</a>' will contain a copy of the response policy zone. Again, configuring named to use this as the basis for a response policy requires extra configuration. I don’t know the purpose of this RPZ, so I can’t give you the exact syntax. Perhaps someone from Spamhaus can help you with that.</div><div><br clear="none"></div><div>I don’t have enough context to answer your question about a whitelist. Perhaps someone else can help
you with that.</div><div><br clear="none"></div><div>Regards,</div><div>Chris Buxton</div><br clear="none"><div><div class="yiv1330197942yqt9911032629" id="yiv1330197942yqt90793"><div>On Dec 23, 2013, at 5:11 AM, babu dheen <<a rel="nofollow" shape="rect" ymailto="mailto:babudheen@yahoo.co.in" target="_blank" href="mailto:babudheen@yahoo.co.in">babudheen@yahoo.co.in</a>> wrote:</div><br class="yiv1330197942Apple-interchange-newline" clear="none"><blockquote type="cite"><div><div style="background-color:rgb(255, 255, 255);font-family:'times new roman', 'new york', times, serif;font-size:12pt;"><div><span>Dear All,</span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span> My
BIND DNS server is authorized to use spamhaus RPZ service and spamhaus
official team requested me to paste below configuration line in
/etc/named.conf file. Since i am new to RPZ and BIND, kindly help me to
enable this feature.<br clear="none"></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span>zone "<a rel="nofollow" shape="rect" target="_blank" href="http://rpz.spamhaus.org/">rpz.spamhaus.org</a>" {<br clear="none"> type slave;<br clear="none"> file "<a rel="nofollow" shape="rect" target="_blank" href="http://dbx.rpz.spamhaus.org/">dbx.rpz.spamhaus.org</a>";<br clear="none"> masters { 199.168.90.51; 199.168.90.52; 199.168.90.53; };<br clear="none"> allow-transfer { none; };<br
clear="none"> allow-query { none; };<br clear="none">};<br clear="none"></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span>My question is:</span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span>1. If i paste the above line alone in /etc/named.conf file will work?</span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br
clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span>2. What will be the content of <a rel="nofollow" shape="rect" target="_blank" href="http://dbx.rpz.spamhaus.org/">dbx.rpz.spamhaus.org</a> file ?</span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span>3. How to maintain the local whitelist policy?</span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times,
serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span>Regards</span></div><div style="font-size:16px;font-family:'times new roman', 'new york', times, serif;background-color:transparent;font-style:normal;"><span>Babudheen</span></div></div></div>_______________________________________________<br clear="none">Please visit <a rel="nofollow" shape="rect" target="_blank" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br clear="none"><br clear="none">bind-users mailing list<br clear="none"><a rel="nofollow" shape="rect" ymailto="mailto:bind-users@lists.isc.org" target="_blank" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br
clear="none">https://lists.isc.org/mailman/listinfo/bind-users</blockquote></div></div><br clear="none"></div></div><br><br></div> </div> </div> </div> </div></body></html>