[RPZ] Getting distros to enable RPZ in Bind packages?

Paul Vixie paul at redbarn.org
Thu Jan 17 00:38:29 UTC 2013

Augie Schwer wrote:
> Oh, my apologies -- I thought Bind had to be built with
> " --enable-rpz-nsip --enable-rpz-nsdname" to enable RPZ; I just tested
> the stock named that ships with RH6 and RPZ does indeed work.

what you won't get by default is the NSDNAME and NSIP rule support.
which almost nobody uses yet.

this will likely become the default in 9.10.

More information about the DNSfirewalls mailing list