[RPZ] Separate RPZ and RRL patches

Vernon Schryver vjs at rhyolite.com
Fri Jan 11 19:01:34 UTC 2013

Separate versions of the RPZ and RRL patches are now available.
The link on http://www.redbarn.org/dns/ratelimits points to a page
with the 6 separate patches as well as the 4 combined patches.

That page also contains extended descriptions of the two flavors
of RPZ patches.

The previously announced combined RPZ+RLL patches are strongly
recommended over the separate patches.

If you use RPZ but not RRL, installing a combined RPZ+RRL patch is
unlikely to cause any problems, because you won't be exercising the
RRL code.

If you use both RPZ and RRL, then you *must* use a combined RPZ+RRL
patch because no RRL patch for current BIND9 source is compatible
with the separate RPZ patches.  The separate RPZ and RLR patches
try to change some of the same code.

If you use RPZ and later decide to try RRL, you will need to start over
patching your BIND source with a combined RPZ+RRL patch.

Vernon Schryver    vjs at rhyolite.com

More information about the DNSfirewalls mailing list