[dnsdist] Modifying requests
steve at abusix.com
Fri Mar 15 13:07:35 UTC 2019
Thanks for the reply.
I was thinking of placing dnsdist in front of a pool of rbldnsd servers
and placing an query key within the qname as a form of authentication
(instead of using an IP ACL), e.g. ip.ip.ip.ip.query_key.zone.zone.zone
With the query keys in memory, it would have been simply to allow the
modified qname through, or to return NXDOMAIN or REFUSED if the query
key was either missing or invalid.
On 15/03/2019 13:01, Remi Gacogne wrote:
> Hi Steve,
> On 3/15/19 1:51 PM, Steve Freegard wrote:
>> In Packet Policies, it states that each packet can be "Modified and
>> forwarded to a downstream and be modified back".
>> But I can't work out how to do this and the docs don't appear to give
>> any examples - what I would like to do is remove a label from the qname
>> before forwarding to a pool.
>> Anyone have any pointers as to how to do this?
> I'm afraid currently does not support altering the qname.
> If you don't mind telling us a bit more about what you are trying to
> achieve, perhaps we can suggest another way or, if it makes sense, turn
> that into a feature request.
> Best regards,
> dnsdist mailing list
> dnsdist at mailman.powerdns.com
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dnsdist