RPZ: Windows 11 Pro

Unbound
1

Intro

First of, I’m a nix user my self and my own config,setups etc is of cause set for linux.

My challenge arise when I’m trying to help a online friend on a Windows 11 Pro. (Yes 1000 km away).

And I previously successfully had unbound running on another windows(still not mine) I thought for my self, that should be rather easy :sob: :unamused_face: but lets face it… M$, nothing is never easy or done the easy way :scream:

So to try find the diffs and eliminate issues, we toke one step at the time, and have now come to the part with RPZ!!

Problem description

The RPZ zones are loaded and zone files are created, The domains match happens, and now to the BUG.. after the query happens, the RPZ log says record is disabled :confounded_face:

The config file being used is: unbound conf ($7657) · Snippets · GitLab

Question

Is their a new argument for enabling a RPZ zone in version 1.25.1?

2

Here is a dump of the log

image

drill axfr adult.mypdns.cloud | grep "^pornhub\.com\.adult"
pornhub.com.adult.mypdns.cloud. 300     IN      CNAME   .
3

After a bit of trial and error, we got the `unbound-control up and running, and ran`unbound-control rpz_enable adult.mypdns.cloud`, even then the logs and query indicates the RPZ-record is disabled

image
image715×636 15.9 KB

4

Flying by this topic I notice that the latest log shows correctly what is currently configured (from the earlier shared configuration):

rpz:
  name: "adult.mypdns.cloud"
  ...
  rpz-action-override: disabled

Maybe you want to take that configuration line out?

5

Of course… Copy paste error… I build the list, don’t use it… so of course it’s disabled in my own instance :slight_smile: , but using it to test for match error 40!

thx for spotting it