DNS-RPZ#

Author: Michael Hornung; Expeditors International of Washington, Inc.
License: AGPL-V3
Version: 1.0
Supported data types:
- thehive:case_artifact
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

Add a dynamic DNS entry to a Response Policy Zone, blackholing or redirecting a FQDN.

Configuration#

bind_server	IP or FQDN of RPZ master BIND server
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

tsig_keyname	Name of TSIG key to access BIND server
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

tsig_keyval	TSIG key value to access BIND server
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

tsig_hashalg	TSIG hash algorithm to use
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

rpz_zonename	Fully qualified RPZ zone name (don't forget the trailing dot)
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

remediation_ip	IP to resolve RPZ names to
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

Last update: October 16, 2020 10:16:06