I added an RPZ zone to overwrite some hosts in my BIND9 server, adding the following lines to named.conf:
...
response-policy { zone "rpz"; };
...
zone "rpz" {
type master;
file "/etc/bind/rpz.hosts";
allow-update { 172.33.1.7; };
};
The rpz.hosts file:
$TTL 38400 ; 10 hours 40 minutes
@ IN SOA localhost. root.localhost (
1515764950 ; serial
10800 ; refresh (3 hours)
3600 ; retry (1 hour)
604800 ; expire (1 week)
38400 ; minimum (10 hours 40 minutes)
)
NS 172.33.1.2.
When I try to update it with nsupdate, using an arbitrary hostname like somehost.dyndns.dappnode.io I get a NOTZONE error. The update mechanism expects some host under the rpz.
zone.
How I can workaround this? Anyone managed to configure dynamically a RPZ zone?
Thank you