]> git.ipfire.org Git - thirdparty/pdns.git/blame - pdns/basic.rpz
b2b-migrate did not open a transaction, breaking it for lmdb
[thirdparty/pdns.git] / pdns / basic.rpz
CommitLineData
644dd1da 1$TTL 2h;
2$ORIGIN domain.example.com.
3@ SOA powerdns.example.net. hostmaster.example.com ( 1 12h 15m 3w 2h)
31343777 4 NS powerdns.example.net.
644dd1da 5; begin RPZ RR definitions
6
7;; QNAME Trigger
8
9; QNAME Trigger NXDOMAIN Action
10; kills whole domain
11nxdomain.org CNAME .
44a6ceec 12*.nxdomain.org CNAME .
644dd1da 13
14; QNAME Trigger PASSTHRU Action
15; typically only used for bypass
44a6ceec 16mail.nxdomain.org CNAME rpz-passthru.
644dd1da 17
18; QNAME Trigger DROP Action
19; kills whole domain
20example.net CNAME rpz-drop.
21*.example.net CNAME rpz-drop.
22
23; QNAME Trigger Truncate Action
24; kills whole domain
25truncate.org CNAME rpz-tcp-only.
44a6ceec 26*.truncate.org CNAME rpz-tcp-only.
644dd1da 27
28; QNAME Trigger Local-Data Action
29; sends to a local website
30; kills whole domain
31local.org CNAME explanation.example.com.
32*.local.org CNAME explanation.example.com.
33
34local-a.org A 192.168.2.5
44a6ceec 35*.local-a.org A 192.168.2.5
644dd1da 36
37; CLIENT-IP Trigger DROP Action
38; kills all DNS activity from this client
3924.0.0.0.127.rpz-client-ip CNAME rpz-drop.
40
41; CLIENT-IP Trigger TCP-ONLY Action
42; slows-up all DNS activity from this client
4332.1.0.0.10.rpz-client-ip CNAME rpz-tcp-only.
44
45; IP Trigger NXDOMAIN Action
46; any answer containing IP range
4732.2.0.0.10.rpz-ip CNAME .
48
49;; NSDNAME Trigger
50;; if ns1.example.org appears in the authority section
51;; of any answer
52
53; NSDNAME Trigger NXDOMAIN Action
54; kills specific name server
55dns-eu1.powerdns.net.rpz-nsdname CNAME .
44a6ceec 56
644dd1da 57; this will kill any name servers from example.org
58*.powerdns.net.rpz-nsdname CNAME .
59
60; NSDNAME Trigger TCP-ONLY Action
61; kills specific name server
62*.gtld-servers.net.rpz-nsdname CNAME rpz-tcp-only.
63