[RPZ] something_else.pseudotld.tld and BIND and DNS in the wild

Paul Vixie vixie at isc.org
Thu Apr 21 14:12:11 UTC 2011


fred, this is an excellent catch.  we avoided as much as possible any
necessary encoding in RPZ's metadata structure that would trigger any
'check-names' warnings or failures.  however, if the names underlying
the triggers contain unusual characters then there's no way to avoid
having the RPZ provider (zone masters) turn off check-names and there's
a strong incentive to have RPZ consumers (zone slaves) do likewise.
--paul



More information about the DNSfirewalls mailing list