DNS-RPZ
DNS-RPZ
Author : Michael Hornung; Expeditors International of Washington, Inc.
License : AGPL-V3
Version : 1.0
Supported data types :
- thehive:case_artifact
Registration required : N/A
Subscription required : N/A
Free subscription : N/A
Third party service : N/A
Description
Add a dynamic DNS entry to a Response Policy Zone, blackholing or redirecting a FQDN.
Configuration
bind_server
IP or FQDN of RPZ master BIND server
Default value if not configured
N/A
Type of the configuration item
string
The configuration item can contain multiple values
False
Is required
True
tsig_keyname
Name of TSIG key to access BIND server
Default value if not configured
N/A
Type of the configuration item
string
The configuration item can contain multiple values
False
Is required
True
tsig_keyval
TSIG key value to access BIND server
Default value if not configured
N/A
Type of the configuration item
string
The configuration item can contain multiple values
False
Is required
True
tsig_hashalg
TSIG hash algorithm to use
Default value if not configured
N/A
Type of the configuration item
string
The configuration item can contain multiple values
False
Is required
True
rpz_zonename
Fully qualified RPZ zone name (don't forget the trailing dot)
Default value if not configured
N/A
Type of the configuration item
string
The configuration item can contain multiple values
False
Is required
True
remediation_ip
IP to resolve RPZ names to
Default value if not configured
N/A
Type of the configuration item
string
The configuration item can contain multiple values
False
Is required
True
Last update: October 16, 2020 10:16:06