[DNSfirewalls] [cmikk at fsi.io: [dnstap] (PR) Adding response policy information in dnstap]

[Brian Dickson]

On Mon, Mar 15, 2021 at 1:40 PM Paul Vixie <paul at redbarn.org> wrote:

> On Mon, Mar 15, 2021 at 04:15:55PM -0400, Andrew Fried wrote:
> > I'm assuming this logging feature would require each RPZ resolver vendor
> > to incorporate support for this.  Has ISC/NLnet Labs/PowerDNS indicated
> > that they were amenable to adding that support?
>
> bind9, powerdns, knot, and unbound all have rpz, and all have 'dnstap'.
> some
> of them directly incorporate some 'dnstap' source code, which we're
> patching.
> i fully expect that every one of these f/l/oss dns servers will adopt these
> changes, and i will start the outreach on that after the patch is reviewed.
>
> if anybody uses a dns server that's not one of those, please feel to reach
> out
> to us so that we can add their name to the relevant web page (directory)
> and
> reach out to them about joining the relevant mailing list.
>

I am not 100% sure, but I think dnsdist is one. (It may share a code base
with one of those other projects, not sure.)

Brian


>
> in these matters, more is better.
>
> vixie
> _______________________________________________
> DNSfirewalls mailing list
> DNSfirewalls at lists.redbarn.org
> http://lists.redbarn.org/mailman/listinfo/dnsfirewalls
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.redbarn.org/pipermail/dnsfirewalls/attachments/20210315/cadad5f4/attachment-0001.htm>