[Pdns-users] DNSSEC + Split DNS

rob777 rogbru at gmail.com
Thu Apr 9 09:24:56 UTC 2026


>
> Response Policy Zone on the recursor is the way I'd do it. This is what
> RPZ is designed for: to override specific DNS answers.
>

I've used to do it with Bind Views in the past as i've had BIND running. As
i've migrated to Powerdns this generated some issues obviously since bind
view wasnt available then and it has to be done with LUA Records.

This historical thing with Shadow Records is something that is difficult to
clean up and fix for different reasons. And it regularly comes back and
bites me in the ass..
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20260409/17d48687/attachment.htm>


More information about the Pdns-users mailing list