[RPZ] Which 'options' section does the RPZ config go in?
paul at redbarn.org
Fri Mar 29 22:21:53 UTC 2013
ixloran at sent.at wrote:
> From what I understand the zone provider you're using PUSHES the
> updates as master to your slave. I thought the "allow-transfer" is
> what's needed to allow/enable that push. No?
allow-transfer means "allow these addresses to transfer from me". it's
an ACL. where you transfer from is another matter, determined by the
>> as cricket said, the rpz configuration elements belong in your recursive view.
> OK. If I were to ever turn on recursive for BOTH internal & external
> views, would the config go best in EACH recursive view at that point?
> Or can I put it in the global options stanza?
you can do either.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the DNSfirewalls