mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-15 00:30:03 -04:00
3496. [func] Improvements to RPZ performance. The "response-policy"
syntax now includes a "min-ns-dots" clause, with
default 1, to exclude top-level domains from
NSIP and NSDNAME checking. --enable-rpz-nsip and
--enable-rpz-nsdname are now the default. [RT #32251]
Response policy (rpz) changes to
- add zone statistics
- speed up by adding min-ns-dots to the response-policy syntax
with a default of 1
- detect and reject policy zones with a database other than rbt
only rbtdb has rpz hooks
- allow empty response-policy{} statement
- make --enable-rpz-nsip and --enable-rpz-nsdname the default
|
||
|---|---|---|
| .. | ||
| bind9 | ||
| dns | ||
| export | ||
| irs | ||
| isc | ||
| isccc | ||
| isccfg | ||
| lwres | ||
| tests | ||
| win32/bindevt | ||
| .gitignore | ||
| Atffile | ||
| Makefile.in | ||