upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-07-15 08:50:52 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Document RPZ Extended DNS Error (EDE) code configuration option

Browse source 
Add information about the 'ede' option for response policy zones.
This commit is contained in:
Aram Sargsyan 2022-08-26 14:39:11 +00:00
parent 5e4e303ffa
commit 7eda1aba76
1 changed files with 29 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
doc/arm/reference.rst
View file

@ -5374,6 +5374,35 @@ with this zone file:
example.com CNAME rpz-tcp-only.
*.example.com CNAME rpz-tcp-only.
Response policy zones can be configured to set an Extended DNS Error (EDE) code
on the responses which have been modified by the response policy:
::
response-policy { zone "badlist" ede filtered; };
The following settings are supported for the ``ede`` option:
``none``
No Extended DNS Error code is set (default).
``forged``
Extended DNS Error code 4 - Forged Answer.
``blocked``
Extended DNS Error code 15 - Blocked.
``censored``
Extended DNS Error code 16 - Censored.
``filtered``
Extended DNS Error code 17 - Filtered.
``prohibited``
Extended DNS Error code 18 - Prohibited.
See :rfc:`8914` for more information about the Extended DNS Error codes.
RPZ can affect server performance. Each configured response policy zone
requires the server to perform one to four additional database lookups
before a query can be answered. For example, a DNS server with four