<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 08/11/2025 13:11, Lee wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAD8GWstdf4_NBcxFPbyu2hz0Yq2JyaT2pHQvcCxvQ72EkjxnGQ@mail.gmail.com">
<pre class="moz-quote-pre" wrap=""><pre wrap=""
class="moz-quote-pre">On Fri, Nov 7, 2025 at 3:53 PM Crist Clark wrote:
</pre><blockquote type="cite" style="color: #007cff;"><pre wrap=""
class="moz-quote-pre">I still don't understand why an RPZ entry of,
10.zz.fe80. IN CNAME *.
Doesn't work for you.
</pre></blockquote><pre wrap="" class="moz-quote-pre">First
</pre><blockquote type="cite" style="color: #007cff;"><blockquote
type="cite" style="color: #007cff;"><pre wrap=""
class="moz-quote-pre">DiG 9.10.6
</pre></blockquote></blockquote><pre wrap="" class="moz-quote-pre">are you really running a 9.10 version of bind?!
second,
because it's missing rpz-ip?
I've got
; return NXDOMAIN for any ipv6 link local address answer
10.zz.fe80.rpz-ip CNAME . ; FE80::/10
and it doesn't work for me 🙁</pre></pre>
</blockquote>
<p>This works for me (BIND 9.20.11):</p>
<pre>10.zz.fe80.rpz-ip IN CNAME *.</pre>
<p>(You need to rewrite using NODATA, rather than NXDOMAIN.)</p>
<p>Nick.</p>
</body>
</html>