<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<small><font face="Consolas">Hi Folks,<br>
<br>
I am currently struggling with using RPZ for inserting or
overriding TXT resource records.<br>
<br>
This is my goal:<br>
</font></small>
<blockquote><small><font face="Consolas"><font color="#3333ff">; do
not rewrite <a class="moz-txt-link-abbreviated" href="http://www.cisco.com">www.cisco.com</a> (so, PASSTHRU) and add or override
missing metadata</font></font></small><br>
<small><font face="Consolas"><font color="#3333ff"><a class="moz-txt-link-abbreviated" href="http://www.cisco.com">www.cisco.com</a>
CNAME rpz-passthru.</font></font></small><br>
<small><font face="Consolas"><font color="#3333ff"><a class="moz-txt-link-abbreviated" href="http://www.cisco.com">www.cisco.com</a>
TXT "CISCO-CLS=app-name:HTTP|app-class:TD"</font></font></small><br>
</blockquote>
<small><font face="Consolas">What work's is that I can do one or the
other but not both at the same time if I need to use a CNAME.<br>
<br>
This works:<br>
</font></small>
<blockquote><small><font face="Consolas"><font color="#3333ff">wolfgang.dns-as.org
A 193.34.28.108</font></font></small><br>
<small><font face="Consolas"><font color="#3333ff">wolfgang.dns-as.org
TXT "CISCO-CLS=app-name:RPZ|app-class:TD"</font></font></small><br>
</blockquote>
<small><font face="Consolas">but in reality this will not work for
CDN or load-balanced sites which don't have fixed IP address.<br>
<br>
Any hint's what I am doing wrong?<br>
<br>
Many thanks,<br>
Wolfgang</font></small>
</body>
</html>