Homas / ioc2rpz

ioc2rpz is a place where threat intelligence meets DNS.
Apache License 2.0
105 stars 17 forks source link

Unable to load RPZ zone #41

Closed dmgeurts closed 2 years ago

dmgeurts commented 2 years ago

I thought I had it all working, then come back a few days later to find RPZ not working in PowerDNS-recursor. This is the error log I get:

Dec 17 19:38:37 rdns1 pdns-recursor[3684822]: msg="Unable to load RPZ zone, will retry" subsystem="rpz" level=1 prio=4 ts="1639766317.724" exception="Packet (gambling.ioc2rpz|#252) has a TSIG record in an invalid position." from="10.1.1.1" refresh="10" zone="gambling.ioc2rpz"

What on earth does "TSIG record in an invalid position" mean?

Homas commented 2 years ago

When did you pull ioc2rpz? Was it master or dev branch?

dmgeurts commented 2 years ago

Master (afaik). However, I think I've found the issue. When I check the size of the zone using an AXFR I see it's empty...

Homas commented 2 years ago

please pull the dev branch. I've made a few fixed couple of days ago. IXFR was broken.

dmgeurts commented 2 years ago

The regex on my source feed was broken.