Uploading a Response Policy file - BlueCat Integrity - 9.4.0

Address Manager Administration Guide

Locale
English
Product name
BlueCat Integrity
Version
9.4.0

How to upload a Response Policy file to Address Manager.

To add a Response Policy file:

  1. Select the My IPAM tab. Tabs remember the page you last worked on, so select the tab again to ensure you're on the User Home Page.
  2. From the configuration drop-down menu, select a configuration.
  3. Select the DNS tab. Tabs remember the page you last worked on, so select the tab again to ensure you're on the Configuration information page.
  4. Under Response Policies, click the Response Policy object from the list.
  5. Under Policy Items, click Action and select Upload Policy Items.
  6. Under File Selection, click Browse... beside the Response Policy File field.
  7. Locate the file on your system and click Open.
  8. Click Apply to upload.
    Attention: Uploading a response policy file will replace the entire contents of this Response Policy with items from the file.
    • The Response Policy file should be a normal text (.txt) file.
    • IP address-based matches are placed into a reverse format. For example, to block 192.0.2.2, you will need to add 32.2.2.0.192.rpz-ip to your Response Policy. This will block any host request that resolves to 192.0.2.2. To block an IPv6 address, you will need to add a similar entry. For example, to block any host that resolves to 2001:DB8:BC:0:FC00:0:0:53, you need to add 128.53.0.0.FC00.0.BC.DB8.2001.rpz-ip.
    • IP address-based matches can be used to block entire networks. To block an entire network, add the netmask for the network in front. For example, to block the network 192.1.0.0/16, you will need to add 16.0.0.1.192.rpz-ip to your Response Policy. To block the entire 2001:DB8:BC:0/64 network, you need to add 64.0.0.0.0.0.BC.DB8.2001.rpz-ip.

    To deploy Response Policies to a managed BlueCat DNS Server, Response Policy Zones and DNS deployment role must be defined.