Evan Hunt
421d4a0647
3620. [func] Added "rpz-client-ip" policy triggers, enabling RPZ responses to be configured on the basis of the client IP address; this can be used, for example, to blacklist misbehaving recursive or stub resolvers. [RT #33605] 3619. [bug] Fixed a bug in RPZ with "recursive-only no;" [RT #33776]
44 lines
1.3 KiB
Plaintext
44 lines
1.3 KiB
Plaintext
; Copyright (C) 2011-2013 Internet Systems Consortium, Inc. ("ISC")
|
|
;
|
|
; Permission to use, copy, modify, and/or distribute this software for any
|
|
; purpose with or without fee is hereby granted, provided that the above
|
|
; copyright notice and this permission notice appear in all copies.
|
|
;
|
|
; THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
|
|
; REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
; AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
; INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
; LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
|
|
; OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
; PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
; $Id$
|
|
|
|
|
|
$TTL 120
|
|
. SOA ns. hostmaster.ns. ( 1 3600 1200 604800 60 )
|
|
NS ns.
|
|
ns. A 10.53.0.1
|
|
|
|
; rewrite responses from this zone
|
|
tld2. NS ns.tld2.
|
|
ns.tld2. A 10.53.0.2
|
|
|
|
; rewrite responses from this secure zone unless dnssec requested (DO=1)
|
|
tld2s. NS ns.tld2.
|
|
|
|
; requests come from here
|
|
tld3. NS ns.tld3.
|
|
ns.tld3. A 10.53.0.3
|
|
|
|
; rewrite responses from this zone
|
|
tld4. NS ns.tld4.
|
|
ns.tld4. A 10.53.0.4
|
|
|
|
; performance test
|
|
tld5. NS ns.tld5.
|
|
ns.tld5. A 10.53.0.5
|
|
|
|
; generate SERVFAIL
|
|
servfail NS ns.tld2.
|