BIND Cakralintas RPZ Option

Dalam membangun DNS channel-11 dan Era Akses saya menambahkan option option berikut pada BIND Resolver dintaranya :
Pada Primary
version "[Ogev Rulez]";
response-policy { zone "srpz.zone"; zone "kominfo.rulez1"; zone  "kominfo.rulez2" ; zone "kominfo.rulez3" ; zone "kominfo.rulez4";};

logging {
  channel rpz-queries {
    file "/var/log/bind/rpz.log" versions 10 size 500k;
    severity info;
  };
  category rpz {
    rpz-queries;
  };
};

zone "srpz.zone" {
    type master;
    file "/etc/namedb/db1.srpz.local";
    allow-query { any; };
    allow-update { none; };
};

zone "kominfo.rulez1" {
    type master;
    file "/etc/namedb/db2.srpz.local";
    allow-query { any; };
    allow-update { none; };
};




zone "kominfo.rulez2" {
    type master;
    file "/etc/namedb/db3.srpz.local";
    allow-query { any; };
    allow-update { none; };
};

zone "kominfo.rulez3" {
    type master;
    file "/etc/namedb/db4.srpz.local";
    allow-query { any; };
    allow-update { none; };
};

zone "kominfo.rulez4" {
    type master;
    file "/etc/namedb/db5.srpz.local";
    allow-query { any; };
    allow-update { none; };
};

Pada Secondary :

response-policy { zone "srpz.zone"; zone  "kominfo.rulez1"; zone  "kominfo.rulez2" ; zone "kominfo.rulez3" ; zone "kominfo.rulez4"; };

zone "srpz.zone" {type slave; file "/etc/namedb/db1.srpz.local"; masters {203.84.136.2; };
};

zone "kominfo.rulez1" {
    type slave;
    file "/etc/namedb/db2.srpz.local";
        masters {203.84.136.2; };
};

zone "kominfo.rulez2" {
    type slave;
    file "/etc/namedb/db3.srpz.local";
masters {203.84.136.2; };
};

zone "kominfo.rulez3" {
    type slave;
    file "/etc/namedb/db4.srpz.local";
        masters {203.84.136.2; };
};

zone "kominfo.rulez4" {
    type slave;
    file "/etc/namedb/db5.srpz.local";
masters {203.84.136.2; };
};

No comments:

Post a Comment