<div dir="ltr">Is this list spammed? I am receiving lot of SPAM mails.</div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Apr 17, 2018 at 8:52 AM, Blason R <span dir="ltr"><<a href="mailto:blason16@gmail.com" target="_blank">blason16@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi All,<div><br></div><div>I am building DNS RPZ and I am complete no-vice. I will be having around 10-20k zones which my DNS will be wallgardening.</div><div><br></div><div>Just wondering how this can be done with DNZ RPZ? Since the zones has to be included in named.conf.</div><div><br></div><div>Plus I am practising DNZ RPZ on my test server and its failing. Can someone please guide? Am I making any mistake here?</div><div><br></div><div><div>options {</div><div> listen-on port 53 { 127.0.0.1; any; };</div><div> listen-on-v6 port 53 { ::1; };</div><div> directory "/var/named";</div><div> dump-file "/var/named/data/cache_dump.<wbr>db";</div><div> statistics-file "/var/named/data/named_stats.<wbr>txt";</div><div> memstatistics-file "/var/named/data/named_mem_<wbr>stats.txt";</div><div> allow-query { localhost; <a href="http://192.168.5.0/24;" target="_blank">192.168.5.0/24;</a>};</div><div> response-policy { zone "<a href="http://google.com" target="_blank">google.com</a>"; };</div><div><br></div></div><div><br></div><div><div>zone "<a href="http://google.com" target="_blank">google.com</a>" IN {</div><div> type master;</div><div> file "rpz.file.db";</div><div> };</div></div><div><br></div><div>******************************<wbr>***********</div><div><br></div><div><div>[<a href="mailto:root@dnzrpz.isn.in" target="_blank">root@dnzrpz.isn.in</a> /var/named]# more rpz.file.db</div><div>$TTL 1D</div><div>@ IN SOA <a href="http://ns1.google.com" target="_blank">ns1.google.com</a>. <a href="http://root.google.com" target="_blank">root.google.com</a>. (</div><div> 2 ;</div><div> 1D ;</div><div> 1H ;</div><div> 1W ;</div><div> 3H ) ;</div><div>@ IN NS <a href="http://ns1.google.com" target="_blank">ns1.google.com</a>.</div><div>@ IN A 3.3.3.3</div><div><br></div><div><a href="http://google.com" target="_blank">google.com</a> IN CNAME @</div><div><a href="http://www.google.com" target="_blank">www.google.com</a> IN CNAME @</div></div><div><br></div><div>******************************<wbr>**</div><div><br></div><div><div>[<a href="mailto:root@dnzrpz.isn.in" target="_blank">root@dnzrpz.isn.in</a> /var/named]# systemctl status named.service -l</div><div>● named.service - Berkeley Internet Name Domain (DNS)</div><div> Loaded: loaded (/usr/lib/systemd/system/<wbr>named.service; enabled; vendor preset: disabled)</div><div> Active: failed (Result: exit-code) since Tue 2018-04-17 08:50:55 IST; 31s ago</div><div> Process: 937 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=1/FAILURE)</div><div><br></div><div><b>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> bash[937]: _default/<a href="http://google.com/IN" target="_blank">google.com/IN</a>: bad zone</b></div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> bash[937]: zone localhost.localdomain/IN: loaded serial 0</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> bash[937]: zone localhost/IN: loaded serial 0</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> bash[937]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.<wbr>0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.<wbr>0.0.ip6.arpa/IN: loaded serial 0</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> bash[937]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> bash[937]: zone 0.in-addr.arpa/IN: loaded serial 0</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> systemd[1]: named.service: control process exited, code=exited status=1</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> systemd[1]: Unit named.service entered failed state.</div><div>Apr 17 08:50:55 <a href="http://dnzrpz.isn.in" target="_blank">dnzrpz.isn.in</a> systemd[1]: named.service failed.</div><div>[<a href="mailto:root@dnzrpz.isn.in" target="_blank">root@dnzrpz.isn.in</a> /var/named]#</div></div><div><br></div></div>
</blockquote></div><br></div>