blob: 2b34a541d13c9f3c434f7c7c676114b23587900a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
.. SPDX-License-Identifier: GPL-3.0-or-later
.. _policies:
*****************************************
Policy, access control, data manipulation
*****************************************
Features in this section allow to configure what clients can get access to what
DNS data, i.e. DNS data filtering and manipulation.
:ref:`mod-policy` specify global policies applicable to all requests,
e.g. for blocking access to particular domain. :ref:`mod-view` allow
to specify per-client policies, e.g. block or unblock access
to a domain only for subset of clients.
It is also possible to modify data returned to clients, either by providing
:ref:`mod-hints` (answers with statically configured IP addresses),
:ref:`mod-dns64` translation, or :ref:`mod-renumber`.
Additional modules offer protection against various DNS-based attacks,
see :ref:`mod-rebinding` and :ref:`mod-refuse_nord`.
At the very end, module :ref:`mod-daf` provides HTTP API for run-time policy
modification, and generally just offers different interface for previously
mentioned features.
.. toctree::
:maxdepth: 1
modules-policy
modules-view
modules-hints
modules-dns64
modules-renumber
config-answer-reordering
modules-rebinding
modules-refuse_nord
modules-daf
|
