RPZ zone is this config correct?

[RayG]

I have created the following RPZ entry for unbound and added respip to the
module configuration.

 

rpz:

     name: "rpz.urlhaus.abuse.ch."

     zonefile: "c:\programdata\unbound\logs\URLHaus.rpz"

     url: https://urlhaus.abuse.ch/downloads/rpz

     rpz-log: yes

     rpz-log-name: "URLHausRPZ"

 

If I understand things correctly unbound should fetch the zone file using
the URL and store the data in the zonefile. I created an empty zone file but
it is not being populated by unbound. I cannot see any relevant issues in
the log file.  I also have not (yet) seen any entries in the log file with
the appended log name item.

 

Do I have the correct configuration and understanding?

 

Following on would it be correct to add these masters to the configuration:

 

     master: 151.101.130.49

     master: 151.101.66.49

     master: 151.101.194.49

     master: 151.101.2.49

 

C:\>dig urlhaus.abuse.ch.

 

; <<>> DiG 9.16.6 <<>> urlhaus.abuse.ch.

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1870

;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

 

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 4096

;; QUESTION SECTION:

;urlhaus.abuse.ch.              IN      A

 

;; ANSWER SECTION:

urlhaus.abuse.ch.       3037    IN      CNAME   p2.shared.global.fastly.net.

p2.shared.global.fastly.net. 29 IN      A       151.101.130.49

p2.shared.global.fastly.net. 29 IN      A       151.101.194.49

p2.shared.global.fastly.net. 29 IN      A       151.101.2.49

p2.shared.global.fastly.net. 29 IN      A       151.101.66.49

 

Thanks 

 

RayG

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20201012/66e06c63/attachment-0001.htm>