Whitelisting sites using RPZ

[Daniel Stirnimann]

On 26.04.18 09:46, Blason R wrote:
> Oh thats great...in that case general practice would be always whitelist
> the zones first then blacklist?

I'm using:

whitelist with "policy passthru log no"
test zones with "policy passthru"
blacklists with "policy cname LANDINGPAGE"

Note, "[ log yes_or_no ]" has been added in BIND 9.12.

Daniel