one domain not resolving via response-policy zone

Kai Wiechers kai at riskident.com
Mon Jan 22 12:58:47 UTC 2018


Hi List,

I setup a response-policy zone to override some Records from external
DNS-Servers I can't control.

My db.rpz Zonefile:

$TTL 4H
@               IN      SOA     localhost. kai.mydomain.com. (
                        2018012212      ; serial
                        5M              ; refresh
                        5M              ; retry
                        4W              ; expiry
                        5M)             ; minimum
                  IN      NS      localhost.

localhost                    A    127.0.0.1

ulf.test.google.de       A    192.168.0.1
gerd.test.google.de   A    192.168.0.2
bild.de                        A    192.168.0.3
somehost.ov.otto.de  A    10.0.0.1
otherhost.ov.otto.de  A    10.0.0.2
heise.de                     A    192.168.0.4


In my options I just added

response-policy { zone "rpz"; };

What really drives me crazy is, that the override of the google and
heise domain is working. But the otto.de domains not.
If I do a nslookup for one of the otto.de domains I reveive "** server
can't find somehost.ov.otto.de: SERVFAIL"

Any hints for me?

Thanks and best regards,
Kai


More information about the bind-users mailing list