Vernon Schryver vjs at rhyolite.com
Thu Dec 15 20:13:04 UTC 2011

> I would like to install reverse policy zone in our dns.
> Please let me know how can I do it.
> I want to block malware site query answer from my dns.

There are links to a dozen articles about RPZ in the ISC Knowledge Base.

The "Response Policy Zone (RPZ) Rewriting" section of Chapter 6 of the
Administrator's Reference Manual or ARM documents RPZ named.conf settings.
See https://www.isc.org/software/bind/documentation for HTML and PDF
versions of the ARM.

Do you have a specific question about how to configure response
policy zones in BIND9?

Vernon Schryver    vjs at rhyolite.com

More information about the DNSfirewalls mailing list