Add RPZ Zone Support #277
Closed
Add RPZ Zone Support #277
+61
−49
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
Author
|
config now also tested on Ubuntu 24.04 and Debian 12.11 (with 13 pending) |
Contributor
Author
|
tested with Debian 13 using PR278 changes to stop default breaking config in Deb 13 |
added 7 commits
October 16, 2025 10:21
evgeni
reviewed
Oct 16, 2025
| Optional[Enum['yes','no']] $recursion = undef, | ||
| Optional[Enum['yes','no']] $dnssec_enable = undef, | ||
| Optional[Enum['yes','no']] $dnssec_validation = undef, | ||
| Optional[Enum['yes','no','auto']] $dnssec_validation = undef, |
Member
There was a problem hiding this comment.
Suggested change
| Optional[Enum['yes','no','auto']] $dnssec_validation = undef, | |
| Optional[Enum['yes','no','auto']] $dnssec_validation = undef, |
Contributor
Author
|
obsoleted by pr #284 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Add basic support to be able to define a response-policy list of zones into options.conf
This will enable the value of #252 (a little rework maybe needed to align variable names) there is little point having the ability of response policies in views if you cannot define a response policy in the configuration.
This is also the foundation of being able to add more advanced scope of response policies in line with
https://bind9.readthedocs.io/en/v9.20.11/reference.html#namedconf-statement-response-policy section 8.2.13.16
This work was done by also updating the options_conf.erb template to epp format in line with other previous changes and new features which have been delivered by epp templates rather than existing erb templates
config generation tested on EL8 EL9 EL10 with OpenVox 8 agent