Unbound 1.6.0rc1 prerelease
wouter at nlnetlabs.nl
Thu Dec 15 08:16:13 UTC 2016
Just wanted to add a small comment:
On 15/12/16 05:04, Spike via Unbound-users wrote:
> unfortunately in some cases I need inverted regexps/whitelists, for
> example allow sub.domain.tld but otherwise block *.domain.tld. As far as
> I could see you can't do that with local-data.
Yes this is possible, with
local-zone: "domain.tld" static
local-zone: "sub.domain.tld" transparent
The most specific match is used. The sub.domain.tld resolves normally.
But other queries, like foo.domain.tld, get NXDOMAIN.
Best regards, Wouter
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the Unbound-users