protocol.be

This is an old revision of the document!

---

mkdir /var/cache/bind/rpz/
ln -s /var/cache/bind/rpz/ /etc/bind/rpz
nano /etc/bind/named.conf.local


zone "rpz.zone" {
type master;
file "/var/cache/bind/rpz/db.rpz.zone.hosts";
allow-query { private; };
allow-transfer { 172.31.255.12; };
also-notify { 172.31.255.12; };
};


/var/cache/bind/rpz/db.rpz.zone.hosts


$TTL 1H
@       IN      SOA LOCALHOST. bloqueadonobrasil..com.br. (
2024012201      ; Serial  
1h              ; Refresh
15m             ; Retry
30d             ; Expire 
2h              ; Negative Cache TTL
)
NS  bloqueadonobrasil..com.br.
;       ou
;       NS  localhost.


nano /etc/bind/named.conf.options


response-policy {
zone "rpz.zone" policy CNAME localhost;
};


wget https://protocol.be/public/planilha_operacao_url20241011_09_10-1.dns
cat planilha_operacao_url20241011_09_10-1.dns >> /var/cache/bind/rpz/db.rpz.zone.hosts
chown bind: /var/cache/bind/rpz/ -R
systemctl restart bind9