>> i have this situation with RPZ zones (and can grow up with more RPZ zones):
> 
> If no-one has replied, it's possible no-one knows the answer.

The latest draft of the RPZ specification is:

  https://tools.ietf.org/html/draft-vixie-dns-rpz-04

I see nothing, even in "6.1. Per-Zone Action Overrides", that would do
exactly what you want, unfortunately.

> On a more helpful note: yes, first RPZ always wins. If you need 
> different sets of RPZ for different client IP ranges, you will need to 
> use views.

Using views does seem like a possible solution to your
problem, though it would entail maintaining client lists in
the nameserver configuration instead of the zone files, which
would make sense only if your list of exceptions is very stable.



Anne.
-- 
Ms. Anne Bennett, Senior Sysadmin, ENCS, Concordia University, Montreal H3G 1M8
a...@encs.concordia.ca                                    +1 514 848-2424 x2285
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to