[dnsdist] Regex-Question

[Markus Ehrlicher]

Hello together,

I have dnsdist in Version 1.5.1 installed and are successfully using some rules for blocking/slowing down queries for some subdomains:

addAction(RegexRule(".*\\.subdomain\\.example\\.org$"), ERCodeAction(DNSRCode.SERVFAIL))
addAction(RegexRule(".*\\.?example\\.org$"), QPSAction(10))

But now, I have a little more complicated task: I want to block all queries for *.example.org, except subdomain1.example.org and subdomain2.example.org.
I tried it with some Online Regex-Tools (https://regex101.com/r/Y2sXP8/3), but these rule is not accepted by dnsdist. I know that the incasesensitive-flag isn't needed in dnsdist, but this was for testing. Is there a good documentation about the regex escpecially for dnsdist or is my problem not solvable with dnsdist regex?

Thanks for your help and best regards,
Markus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20201113/9d430c36/attachment.htm>