Lines Matching defs:rpz
1037 * bin/tests/system/rpz/tests.sh looks for "rpz.*failed" for problems.
1065 "rpz %s%s%s rewrite %s%s%s%s%s%s : %s",
1110 "try rpz %s rewrite %s via %s",
4319 * the earliest configured policy zone (rpz->num)
4327 zbits &= DNS_RPZ_ZMASK(st->m.rpz->num);
4329 zbits &= DNS_RPZ_ZMASK(st->m.rpz->num) >> 1;
4505 dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type,
4523 suffix = &rpz->client_ip;
4526 suffix = &rpz->origin;
4529 suffix = &rpz->ip;
4532 suffix = &rpz->nsdname;
4535 suffix = &rpz->nsip;
4576 * Look in policy zone rpz for a policy of rpz_type by p_name.
4588 dns_name_t *p_name, dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type,
4684 *policyp = dns_rpz_decode_cname(rpz, *rdatasetp,
4720 rpz_save_p(dns_rpz_st_t *st, dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type,
4729 st->m.rpz = rpz;
4746 st->m.ttl = ISC_MIN(st->m.rdataset->ttl, rpz->max_policy_ttl);
4748 st->m.ttl = ISC_MIN(DNS_RPZ_TTL_DEFAULT, rpz->max_policy_ttl);
4763 dns_rpz_zone_t *rpz;
4799 rpz = rpzs->zones[rpz_num];
4801 if (st->m.rpz->num < rpz->num)
4803 if (st->m.rpz->num == rpz->num &&
4815 result = rpz_get_p_name(client, p_name, rpz, rpz_type, ip_name);
4819 p_name, rpz, rpz_type,
4850 * dns_rpz_find_ip() ensures st->m.rpz->num >= rpz->num.
4858 rpz->num == st->m.rpz->num &&
4869 if (rpz->policy != DNS_RPZ_POLICY_DISABLED) {
4872 rpz_save_p(st, rpz, rpz_type,
5058 dns_rpz_zone_t *rpz;
5115 rpz = rpzs->zones[rpz_num];
5117 if (st->m.rpz->num < rpz->num)
5119 if (st->m.rpz->num == rpz->num &&
5127 result = rpz_get_p_name(client, p_name, rpz, rpz_type,
5132 rpz, rpz_type,
5157 * We known st->m.rpz->num >= rpz->num and either
5158 * st->m.rpz->num > rpz->num or st->m.type >= rpz_type
5161 rpz->num == st->m.rpz->num &&
5169 * leak of rpz rules by rewriting requests in the
5170 * rpz-ip, rpz-nsip, rpz-nsdname,and rpz-passthru TLDs.
5172 * 24.0.3.2.10.rpz-ip. to find the policy rule for
5184 * names in TLDs that start with "rpz-" should
5200 if (rpz->policy != DNS_RPZ_POLICY_DISABLED) {
5203 rpz_save_p(st, rpz, rpz_type,
5627 st->m.rpz->policy != DNS_RPZ_POLICY_GIVEN)
5628 st->m.policy = st->m.rpz->policy;
5636 NULL, st->m.rpz->num);
5759 st->m.rpz->num);
6588 isc_boolean_t dns64_exclude, dns64, rpz;
6630 dns64_exclude = dns64 = rpz = ISC_FALSE;
6688 "rpz rname:%s, pname:%s, fname:%s",
6905 rpz = ISC_FALSE;
7049 * AAAA lookup on a rpz database adjust the qname.
7051 if (dns64 && rpz)
7062 if (dns64 && rpz) {
7295 rpz_st->m.rpz->num);
7303 rpz_st->m.rpz->num);
7308 rpz = ISC_TRUE;
7313 rpz = ISC_TRUE;
7333 rpz = ISC_TRUE;
7357 &rpz_st->m.rpz->cname,
7379 NULL, rpz_st->m.rpz->num);