[rbldnsd] ACL Syntax help (I'm a retard and didn't make a backup)
Michael Tokarev
mjt at tls.msk.ru
Wed Jul 23 19:19:06 MSD 2008
Roland Gaspar wrote:
> Hi All,
>
> Am new to the list, and looked through the archives but did not see this addressed; if it has, feel free to point me to the right post!
>
> I set up an rbldnsd server about a year ago, with the simple purpose of returning the client's IP address when a TXT query was sent.
> (my very specific need was to know the IP address of the DNS server connecting to me, and I could not find an easier way to explain the DNS process to clients.)
> I remember I did this in the ACL file, since in the ACL file, the $ is replaced by the client IP instead of the queried IP.
>
> I lost that acl file.
>
> the clients are told to query the TXT record for 1.1.1.1.rbltest.domain.com , and the answer they get is "Your IP is a.b.c.d"
>
> The zone file loaded by rbldnsd simply contains:
> 1.1.1.1
>
> The ACL file specified the TXT string to return, but I've lost that machine, and the ACL file is corrupted in my backups.
>
> I'm pressed for time, and could really use a hand.
Such an acl data file - there's a trick in constructing it. In
rbldnsd(8) manpage there are 2 relevant sections - ACL itself
and "ip4trie" dataset type referred to in ACL description. The
trick is to construct an entry that matches ALL IP addresses.
The following should work:
===== cut =====
0.0.0.0/1 Your IP is $
128.0.0.0/1 Your IP is $
===== cut =====
/mjt
More information about the rbldnsd
mailing list