upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-01-01 04:19:36 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

rpz triggers, man page fix end label

Browse source
This commit is contained in:
W.C.A. Wijngaards 2021-03-12 10:23:20 +01:00
parent da0bbcec48
commit 263f974120
1 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
doc/unbound.conf.5.in
View file

@ -2394,7 +2394,8 @@ The rpz zone is formatted with a SOA start record as usual. The items in
the zone are entries, that specify what to act on (the trigger) and what to
do (the action). The trigger to act on is recorded in the name, the action
to do is recorded as the resource record. The names all end in the zone
name, so you could type them without a trailing dot in the zonefile.
name, so you could type the trigger names without a trailing dot in the
zonefile.
.P
An example RPZ record, that answers example.com with NXDOMAIN
.nf
@ -2404,10 +2405,10 @@ An example RPZ record, that answers example.com with NXDOMAIN
The triggers are encoded in the name on the left
.nf
name query name
netblock.rpz-client-ip. client IP address
netblock.rpz-ip. response IP address in the answer
name.rpz-nsdname. nameserver name
netblock.rpz-nsip. nameserver IP address
netblock.rpz-client-ip client IP address
netblock.rpz-ip response IP address in the answer
name.rpz-nsdname nameserver name
netblock.rpz-nsip nameserver IP address
.fi
The netblock is written as <netblocklen>.<ip address in reverse>.
For IPv6 use 'zz' for '::'. Specify indiviual addresses with scope length