support RPZ from zone transfer

It is painful to retrieve RPZ data as files. IXFR would operationaly help a lot.

added feature label

added plan label

This issue includes support for other features from RPZ. Hopefully we need just AXFR->policy translation layer.

removed plan label

added insufficient-demand label

mentioned in issue #535

removed insufficient-demand label

Hi, i just want to ask if this will be ever implemented in resolver?

It's still on wishlist. But still not in short-time plans, I'm afraid. I'm unable to estimate when.

Though if you enable reload on file change, it should be relatively easy to use a script doing kdig AXFR @server zone > file, e.g. on a schedule from a systemd-timer.

You mean that i will kdig rpz zone from master server in loop with scheduler and then I will only load the axfr-ed file with config like: policy.add(policy.rpz(policy.DENY, 'axfr-ed.zone.rpz')) ?

Yes. (unless I missed some typo) Though preferably with , true to explicitly request auto-reloading on file change.

It works as expected thanks. Sadly there is "CNAME with custom target in RPZ is not supported yet (ignored)". There is another issue #194 (closed) related to this. If someone will find this usefull.

That's already implemented in 6.x (which is currently in some alpha/beta state). But reloading on RPZ file change is not there yet and neither is zone transfer.