Concatenating more RPZ zones?

Job Job at colliniconsulting.it
Thu Feb 23 13:05:02 UTC 2017


Hi guys,

i have this situation with RPZ zones (and can grow up with more RPZ zones):

response-policy { zone "policy1.lan"; zone "policy2.lan"; };

Within polici1.lan and policy2.lan i have included the client IP that must not load the policy (passthrough).

If a Client IP needs to have enabled policy2.lan but *not* policy1.lan, i noticed it is not possible, because the passthrouh on policy1.lan override/drop application of the policy2.lan

Is there a way to avoid it?

Thank you!
/F


More information about the bind-users mailing list