nsupdate with RPZ

Blason R blason16 at gmail.com
Wed May 23 15:24:49 UTC 2018


Well, thanks for the update. Later I managed to resolve it but issue is;
since this is RPZ a zone and RR are difference hence I dont think nsupdate
would solve my purpose here?

Like zone test.update while RR is

block.this.domain  CNAME  wg.test.update.

Please correct me if I am wrong.

On Wed, May 23, 2018 at 8:43 PM, Chris Buxton <clists at buxtonfamily.us>
wrote:

> On May 22, 2018, at 7:35 PM, Blason R <blason16 at gmail.com> wrote:
>
> > Wondering if anyone have a working How-To guide for implementing
> nsupdate with RPZ? I mean do we need to configure any specific settings in
> zone of Options?
>
> A response policy zone is a zone like any other. You would normally
> restrict access to query it, but if you want to allow some system to manage
> the content of that zone dynamically, go ahead and set up an allow-update
> (or update-policy, if that's what you need) on that zone. Just make sure
> the updater is also allowed to query the zone.
>
> If that's not your use case, tell us what your use case is in more detail
> and perhaps the list can help.
>
> Chris Buxton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20180523/6fc18bb3/attachment.html>


More information about the bind-users mailing list