[Unbound-users] Disable scrubber for certain host/domain names

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi OS,

On 04/15/2014 02:30 PM, Oriental Sensation wrote:
> Hello all,
> 
> I hope this question hasn't been answered already (made a search
> before).
> 
> I am using Unbound with Postfix to query RBL servers. A check for
> IP x.y.w.z against a certain RBL server (say rbl.example.com) would
> send a DNS query to resolve z.w.y.x.rbl.example.com. The answer is
> a 127.0.0.x address.
> 
> Due to Unbound's scrubber, though, this answer is discarded (with
> a warning "debug: sanitize: removing public name with private
> address") which of course makes sense in other circumstances, but
> not in this one.
> 
> I was wondering if there's a way, or a configuration command, to
> turn off this behavior for certain host/domain names. This will
> make running Unbound with RBL quite possible.
> 
> Any help on how to resolve this with the current version is
> greatly appreciated. Thanks in advance.

private-domain: "rbl.example.com"
private-domain: "rbl2.example.net"

Domains listed in these statements are allowed to contain addresses in
the private-address list.

Best regards,
   Wouter


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=AlaE
-----END PGP SIGNATURE-----