Unbound 1.10.0rc1 pre-release

A. Schulze sca at andreasschulze.de
Fri Feb 14 22:18:27 UTC 2020



Am 13.02.20 um 20:51 schrieb A. Schulze via Unbound-users:
> it's late here. rpz testing will happen tomorrow :-)

I was able to write a simple RPZ using https://tools.ietf.org/html/draft-ietf-dnsop-dns-rpz-00#page-6
Maybe a sample zone could be included in documentation.

A Question on "module-config":

The default is usually "validator iterator". To enable rpz, docs say "respip validator iterator" should be used.
That work. But I had enabled the module "subnetcache" for testing purposes, too.

Now, unbound-checkconf fail for
  module-config: "respip subnetcache validator iterator" and also
  module-config: "subnetcache respip validator iterator"

but again: unbound itself do start with both versions. Which one should be used?

Andreas


More information about the Unbound-users mailing list