RPZ zone is this config correct?

[Benno Overeinder]

Hi RayG,

Indeed, the problem was on our side.  Our mailing list software (mailman and postfix) incorrectly marked the email as spam (it scored high on some indicators).

We did move to an email provider, but not for our mailing list.  They are still managed by us on NLnet Labs servers.

And I would like to thank you for your contributions to the mailing list and to Unbound.

Cheers,

— Benno


> On 16 Oct 2020, at 12:35, RayG via Unbound-users <unbound-users at lists.nlnetlabs.nl> wrote:
> 
> All,
>  
> There has been a problem with the mail server at nlnetlabs it seems. If you look at the date of the item below you will see it was sent on the 19th September, it has only just arrived at the list.
>  
> So apologies for any others that have just arrived in the list.
>  
> It seems that whatever was causing the issue has now been fixed.
>  
> I understand that nlnetlabs also changed their e-mail provider recently so there may have been some teething issues.
>  
> RayG
>  
> From: RayG <rgsub1 at btinternet.com> 
> Sent: 19 September 2020 16:55
> To: unbound-users at lists.nlnetlabs.nl
> Subject: RPZ zone is this config correct?
>  
> I have created the following RPZ entry for unbound and added respip to the module configuration.
>  
> rpz:
>      name: "rpz.urlhaus.abuse.ch."
>      zonefile: "c:\programdata\unbound\logs\URLHaus.rpz"
>      url: https://urlhaus.abuse.ch/downloads/rpz
>      rpz-log: yes
>      rpz-log-name: "URLHausRPZ"
>  
> If I understand things correctly unbound should fetch the zone file using the URL and store the data in the zonefile. I created an empty zone file but it is not being populated by unbound. I cannot see any relevant issues in the log file.  I also do not (have not yet) seen any entries in the log file with the appended log name item.
>  
> Do I have the correct configuration and understanding?
>  
> Following on would it be correct to add these masters to the configuration:
>  
>      master: 151.101.130.49
>      master: 151.101.66.49
>      master: 151.101.194.49
>      master: 151.101.2.49
>  
> C:\>dig urlhaus.abuse.ch.
>  
> ; <<>> DiG 9.16.6 <<>> urlhaus.abuse.ch.
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1870
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
>  
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;urlhaus.abuse.ch.              IN      A
>  
> ;; ANSWER SECTION:
> urlhaus.abuse.ch.       3037    IN      CNAME   p2.shared.global.fastly.net.
> p2.shared.global.fastly.net. 29 IN      A       151.101.130.49
> p2.shared.global.fastly.net. 29 IN      A       151.101.194.49
> p2.shared.global.fastly.net. 29 IN      A       151.101.2.49
> p2.shared.global.fastly.net. 29 IN      A       151.101.66.49
>  
> Thanks 
>  
> RayG

-- 
Benno J. Overeinder
NLnet Labs
https://www.nlnetlabs.nl/