1

I have a local recursive resolver based on unbound.

I would like to perform reverse nxdomain-highjacking. I have defined an exisiting domain I would like to block as a local zone. Currently, I reply with a local IP for those zones. But I would like to reply with NXDOMAIN.

How can I achieve that in unbound? There is no hint on this in the documentation.

Cheers, BliZZarD

Improve this question

1 Answer 1

Reset to default
4

This can be achieved by defining a static zone with no data in it, since for each non-existing domain a NXDOMAIN is returned.

local-zone: "testdomain.test" static

The mailing list helped.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .