[dnsdist] Is it possible to setup a SpoofAction/SpoofCNAME action for a listening address?

Remi Gacogne remi.gacogne at powerdns.com
Fri Oct 13 12:36:20 UTC 2023


Hi Frank,

On 11/10/2023 07:01, F Even via dnsdist wrote:
> Hello.  I was wondering if it was possible to do something like
> setting up a netmask group for a QNameRule/SpoofAction, but instead of
> tying it to requesting IP subnets, tie it to a specific set of
> listening addresses.

If you want to match queries sent to a specific of listening addresses,
setting the 'src' parameter of 'NetmaskGroupRule'[1] to false should do 
what you want.

[1]: 
https://dnsdist.org/rules-actions.html?highlight=suffixmatch#NetmaskGroupRule
-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20231013/63c6144e/attachment.sig>


More information about the dnsdist mailing list