RPZ: is this config correct?
rgsub1 at btinternet.com
Tue May 11 15:28:31 UTC 2021
Seems people are having issues with RPZ - can you advise when my particular one will be resolved? Is it the same as the https ones reported below?
Its been a while now...
From: George Thessalonikefs <george at nlnetlabs.nl>
Sent: 11 May 2021 11:16
To: unbound-users at lists.nlnetlabs.nl
Subject: Re: RPZ: is this config correct?
On 11/05/2021 09:56, A. Schulze via Unbound-users wrote:
> Am 10.05.21 um 23:30 schrieb A. Schulze via Unbound-users:
>> Am 01.05.21 um 12:46 schrieb A. Schulze via Unbound-users:
>>> HTTP works, HTTPS don't.
>> Hello George,
>> is there anything I could test/check/do to help?
I am afraid not. I am currently preoccupied with another bug but will get to this right after, will let you know.
> I now setup
> * a webserver that
> - fetch https://urlhaus.abuse.ch/downloads/rpz/ hourly
> - serve that file by http
> * an unbound instance
> - configured to use the rpz from the http location
> Turns out: the zonefile written by unbound, *has* current data ... as
> expected ...
> so only fetch by https is broken somehow.
Thanks again for clarifying that!
I'll try to replicate with the systems you shared (Debian Bullseye and Debian Buster) and go from there.
More information about the Unbound-users