From: Remi Gacogne Date: Thu, 16 Nov 2023 15:33:55 +0000 (+0100) Subject: dnsdist: Update the example configuration, as suggested by @phonedph1 X-Git-Tag: dnsdist-1.9.0-alpha4~26^2~2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f8fe584a16ef3bf802dcca0ba34546db90b6f19a;p=thirdparty%2Fpdns.git dnsdist: Update the example configuration, as suggested by @phonedph1 --- diff --git a/pdns/dnsdistconf.lua b/pdns/dnsdistconf.lua index 2b218d5a99..93e061be5d 100644 --- a/pdns/dnsdistconf.lua +++ b/pdns/dnsdistconf.lua @@ -60,14 +60,14 @@ -- send the queries for selected domain suffixes to the servers -- in the 'abuse' pool --- addAction({"abuse.example.org.", "xxx."}, PoolAction("abuse")) +-- addAction(SuffixMatchNodeRule({"abuse.example.org.", "xxx."}), PoolAction("abuse")) -- drop queries for this exact qname -- addAction(QNameRule("drop-me.example.org."), DropAction()) -- send the queries from a selected subnet to the -- abuse pool --- addAction("192.0.2.0/24", PoolAction("abuse")) +-- addAction(NetmaskGroupRule("192.0.2.0/24"), PoolAction("abuse")) -- Refuse incoming AXFR, IXFR, NOTIFY and UPDATE -- Add trusted sources (slaves, masters) explicitely in front of this rule