Unbound 1.10.0rc1 pre-release
A. Schulze
sca at andreasschulze.de
Fri Feb 14 22:18:27 UTC 2020
Am 13.02.20 um 20:51 schrieb A. Schulze via Unbound-users:
> it's late here. rpz testing will happen tomorrow :-)
I was able to write a simple RPZ using https://tools.ietf.org/html/draft-ietf-dnsop-dns-rpz-00#page-6
Maybe a sample zone could be included in documentation.
A Question on "module-config":
The default is usually "validator iterator". To enable rpz, docs say "respip validator iterator" should be used.
That work. But I had enabled the module "subnetcache" for testing purposes, too.
Now, unbound-checkconf fail for
module-config: "respip subnetcache validator iterator" and also
module-config: "subnetcache respip validator iterator"
but again: unbound itself do start with both versions. Which one should be used?
Andreas
More information about the Unbound-users
mailing list