{"id":11241,"date":"2026-06-29T16:55:48","date_gmt":"2026-06-29T07:55:48","guid":{"rendered":"https:\/\/www.k-in.co.jp\/niwakan\/?p=11241"},"modified":"2026-08-10T17:49:31","modified_gmt":"2026-08-10T08:49:31","slug":"dns-firewall%e3%82%92%e4%bd%9c%e3%81%a3%e3%81%a6%e3%81%bf%e3%82%8b%ef%bc%88%e3%81%9d%e3%81%ae1%ef%bc%89","status":"publish","type":"post","link":"https:\/\/www.k-in.co.jp\/niwakan\/archives\/2026\/06\/11241\/","title":{"rendered":"DNS Firewall\u3092\u4f5c\u3063\u3066\u307f\u308b\uff08\u305d\u306e1\uff09"},"content":{"rendered":"

\u5510\u7a81\u306b\u300cDNS Firewall\u3092\u4f5c\u3063\u3066\u307f\u3088\u3046\u300d\u3068\u601d\u3063\u305f\u306e\u306f\u3001spamhaus\u306e\u30b5\u30a4\u30c8\u3092\u898b\u3066\u56de\u3063\u305f\u304b\u3089\u3002
\n\u5358\u306b\u300c\u898b\u3064\u3051\u3061\u3083\u3063\u305f\u304b\u3089\u3084\u3063\u3066\u307f\u308b\u304b\u306a\u300d\u3068\u3044\u3046\u5b89\u6613\u306a\u767a\u60f3\u3067\u3059\u306a\u3041\u3002
\n<\/p>\n

\u3055\u3066\u3001spamhaus\u306b\u306f\u5b09\u3057\u3044\u3053\u3068\u306b\u3001Power-DNS\u3068BIND\u3068\u304d\u3061\u3093\u3068\u5206\u3051\u3066\u8a2d\u5b9a\u306e\u4ed5\u65b9\u304c\u66f8\u3044\u3066\u3042\u308b\u3002
\n\u672c\u5f53\u306b\u6709\u96e3\u3044\u3053\u3068\u3060\u3002\u3053\u308c\u3067\u66f4\u65b0\u3055\u308c\u3066\u3044\u305f\u3089\u3082\u3063\u3068\u6709\u308a\u96e3\u304b\u3063\u305f\u3002\u62dd\u3093\u3067\u3044\u305f\u304b\u3082\u3057\u308c\u306a\u3044\u3002
\nnamed.conf\u306b\u306f\u4e0b\u8a18\u3092\u8ffd\u52a0\u3059\u308b\u3002
\n\u5148\u305a\u306foptions\u3002<\/p>\n

options {\r\n\tixfr-from-difference yes;\r\n\r\n\tresponse-policy {\r\n\t\tzone \"local.rpz\";\r\n\t\tzone \"drop.ip.dtq\"     POLICY PASSTHRU;\r\n\t\tzone \"phish.host.dtq\"  POLICY PASSTHRU;\r\n\t};\r\n};<\/pre>\n
\u3053\u3046\u66f8\u3044\u3066\u306f\u3042\u308b\u3051\u308c\u3069\u3001\u5b9f\u7269\u306f\u9055\u3046\u3093\u3060\u306a\u3041\u3002
\noptions\u306e\u4e00\u756a\u6700\u5f8c\u306b\u8ffd\u52a0\u3059\u308b\u3002
\nixfr-from-differenceg\u304c\u30b3\u30e1\u30f3\u30c8\u30a2\u30a6\u30c8\u3057\u3066\u3044\u308b\u306e\u306f\u3001\u5165\u308c\u308b\u3068\u901a\u3089\u306a\u3044\u304b\u3089\u3002
\nlocal.rpz\u306f\u81ea\u5206\u3067\u66f8\u304f\u3082\u306e\u3067\u30de\u30b9\u30bf\u30fc\u306b\u306a\u308b\u3002
\nphish.host.dtq\u306fspamhaus\u304b\u3089\u8cb0\u3063\u3066\u304f\u308b\u30b9\u30ec\u30fc\u30d6\u3067\u3059\u308f\u3002\u3053\u308c\u306b\uff08\u591a\u5206\uff09\u5c71\u306e\u3088\u3046\u306b\u30c7\u30fc\u30bf\u304c\u6765\u308b\u3093\u3060\u308d\u3046\u3002<\/p>\n
\/\/ DNS Firewall Settings\r\n\r\n        \/\/ ixfr-from-difference yes;\r\n\r\n        response-policy {\r\n                zone \"local.rpz\";       # \u624b\u52d5\u30d6\u30e9\u30c3\u30af\u30ea\u30b9\u30c8\uff08\u6700\u512a\u5148\uff09\r\n                \/\/ zone \"drop.ip.dtq\"     POLICY PASSTHRU;\r\n                zone \"phish.host.dtq\";  # Spamhaus\u306e\u81ea\u52d5\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u30ea\u30b9\u30c8\r\n        };<\/pre>\n
\u3055\u3066\u3001\u6b21\u306flog file\u3002\u666e\u6bb5\u306e\u30ed\u30b0\u3068\u306f\u5225\u306b\u5410\u304f\u3089\u3057\u3044\u3002
\n\u3053\u3063\u3061\u3082logging\u306e\u5f8c\u308d\u306b\u8ffd\u52a0\u3002<\/p>\n
       channel rpzlog {\r\n                file \"\/opt\/local\/var\/log\/bind9\/rpz.log\";\r\n                print-time yes;\r\n                print-category yes;\r\n                print-severity yes;\r\n                severity info;\r\n        };\r\n        category rpz {\r\n                rpzlog;\r\n        };<\/pre>\n
\u305d\u3057\u3066zone file\u306e\u5b9a\u7fa9\u3002
\n\u3053\u308c\u306fnamed.conf\u306e\u6700\u5f8c\u306b\u8ffd\u52a0\u3057\u305f\u3002\u591a\u5206\u3069\u3053\u3067\u3082\u826f\u3044\u3068\u601d\u3046\u304c\u3001\u898b\u3064\u3051\u3084\u3059\u304f\u6700\u5f8c\u306b\u3002<\/p>\n
\/\/ DNS Firewall zone\r\n\r\nzone \"local.rpz\" {\r\n        type master;\r\n        file \"local.rpz\";\r\n        allow-transfer {none; };\r\n        allow-query {localhost; };\r\n};\r\n\r\nzone \"phish.host.dtq\" {\r\n        type slave;\r\n        file \"dbx.phish.host.dtq\";\r\n        masters { MASTER_ZONE_IPS; };\r\n        allow-transfer { none; };\r\n        allow-query { localhost; };\r\n};\r\n\r\nmasters \"MASTER_ZONE_IPS\" {\r\n        35.156.219.71;\r\n};<\/pre>\n
\u3053\u306e\u307e\u307e\u52d5\u304b\u3059\u3068\u3001spamhaus\u306b\u6012\u3089\u308c\u308b\u3002
\n\u30e6\u30fc\u30b6\u30fc\u767b\u9332\u3057\u306a\u3044\u3068\u3044\u3051\u306a\u3044\u305d\u3046\u3060\u3002
\n\u3068\u3044\u3046\u3053\u3068\u3067\u767b\u9332\u3059\u308b\u3002
\nDNS RESPONSE
\nPOLICY ZONES (RPZ)<\/a>\u304b\u3089\u98db\u3093\u3060\u5148\u3067\u540d\u524d\u3068\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3092\u5165\u529b\u3057\u3001\u56fd\u3092\u9078\u3076\u3002\u6700\u4f4e\u3053\u308c\u3060\u3051\u3067\u767b\u9332\u3067\u304d\u308b\u3089\u3057\u3044\u3002
\n\u554f\u984c\u306f\u3001\u300c\u30d5\u30a9\u30fc\u30e0\u3092\u9001\u4fe1\u3057\u307e\u3057\u305f\u300d\u3068\u8a00\u3063\u3066\u304a\u304d\u306a\u304c\u3089\u30e1\u30fc\u30eb\u304c\u5c4a\u304b\u306a\u3044\u3002
\n\u300c\u3042\u308c\uff1f\u9593\u9055\u3048\u305f\u304b\u306a\uff1f\u300d\u3068\u30da\u30fc\u30b8\u3092\u30d0\u30c3\u30af\uff08\u3067\u304d\u308b\u306e\u3060\u308f\uff09\u3057\u5185\u5bb9\u3092\u518d\u78ba\u8a8d\u3001\u9001\u4fe1\u3057\u76f4\u3059\u3002
\n\u3059\u308b\u3068\u300c\u30dc\u30c3\u30c8\u3058\u3083\u306d\u300d\u5224\u5b9a\u3055\u308c\u305f\u3089\u3057\u3044\u3002\u3053\u308c\u306f\u672c\u5f53\u306b\u9177\u3044\u4ed5\u69d8\u3060\u3068\u601d\u3046\u3002
\n\u300c\u3084\u3089\u308c\u305f\u3001\u9a19\u3055\u308c\u305f\u301c\u300d\u3063\u3066\u6c17\u5206\u3002
\n\u3068\u8a00\u3046\u3053\u3068\u3067\u4eca\u65e5\u306f\u3053\u3053\u304b\u3089\u5148\u306b\u9032\u3081\u307e\u305b\u3093\u3002\u306a\u306e\u3067\uff08\u305d\u306e1\uff09\u306a\u306e\u3067\u3057\u305f\u3002<\/p>\n
\u305f\u307e\u305f\u307edocomo\u306b<\/p>\n
X-DCMSpam: 406\r\nX-DCMCreditRating: 4<\/pre>\n
\u3068\u8a00\u3046\u300c\u3068\u3066\u3082\u7d20\u6575\u306a\uff08\u3053\u3063\u3061\u3088\u3053\u3059\u306a\uff09\u300d\u30e1\u30fc\u30eb\u304c\u6765\u3066\u306d\u3001\u8e0f\u307f\u53f0\u306e\u30ea\u30f3\u30af\u304c\u3042\u3063\u305f\u304b\u3089\u3001local.rpz\u306b\u66f8\u304d\u8fbc\u3093\u3067\u307f\u305f\u3002
\n\u3053\u308c\u3067\u30c6\u30b9\u30c8\u304c\u3067\u304d\u308b\u3002\u306b\u3057\u3057\u3057\u2026\u2026\u3002<\/p>\n
\u305d\u3046\u3057\u305f\u3089\u666e\u901a\u306b\u98db\u3093\u3058\u3083\u3063\u305f\u3002\u4f55\u304b\u304c\u304a\u304b\u3057\u3044\u3002<\/p>\n
% sudo named-checkzone local.rpz \/opt\/local\/var\/named\/local.rpz\r\ndns_rdata_fromtext: \/opt\/local\/var\/named\/local.rpz:8: near eol: unexpected end of input\r\nzone local.rpz\/IN: loading from master file \/opt\/local\/var\/named\/local.rpz failed: unexpected end of input\r\nzone local.rpz\/IN: not loaded due to errors.<\/pre>\n
\u3068\u3001\u30a8\u30e9\u30fc\u306b\u306a\u308b\u3002
\n\u3053\u308cspamhaus\u306b\u3042\u3063\u305f\u30bd\u30fc\u30b9\u306e\u30b3\u30d4\u30fc\u3060\u3088\u3002\u4f55\u3067\u3060\u3088\u3002<\/p>\n
\u8272\u3005\u3042\u3063\u305f\u3051\u308c\u3069\u3001\u7d50\u679c\u3001\u7ba1\u7406\u8005\u7528\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u304c\u7121\u304b\u3063\u305f\u305b\u3044\u3067\u3057\u305f\u3002
\n\u591a\u5206\u300c\u81ea\u5206\u3068\u3053\u306e\u30a2\u30c9\u30ec\u30b9\u5165\u308c\u308b\u306e\u306f\u5f53\u7136\u3060\u3088\u306d\u300d\u3068\u66f8\u304b\u306a\u304b\u3063\u305f\u3093\u3060\u308d\u3046\u3051\u308c\u3069\u3001\u30b5\u30f3\u30d7\u30eb\u304f\u3089\u3044\u306f\u5165\u308c\u3066\u6b32\u3057\u3044\u3002
\n\u5f62\u614b\u304c\u9055\u3063\u3066\u3044\u308b\u304b\u3089\u3001\u8a18\u8f09\u5185\u5bb9\u3082\u9055\u3063\u3066\u5f53\u7136\u3068\u601d\u3063\u305f\u3058\u3083\u306a\u3044\u304b\u3041\u3002
\n\u3053\u3053\u306b\u3082\u7f60\u304c\u3042\u3063\u305f\u306e\u304b\u301c\u3002\u304f\u3063\u305d\u3046\u3001\u304f\u3063\u305d\u3046\u3002
\nrndc reload\u3067\u306fcache\u304c\u6d88\u3048\u306a\u3044\u306e\u3067\u518d\u7acb\u3061\u4e0a\u3052\u3057\u3066\u3001nslookup\u306e\u7d50\u679c\u3001local.rpz\u306b\u66f8\u304d\u8fbc\u3093\u3060\u30c9\u30e1\u30a4\u30f3\u306f\u300c\u30a2\u30c9\u30ec\u30b9\u304c\u898b\u5f53\u305f\u3089\u306a\u3044\u300d\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n
elettronicasalute.com           IN CNAME        www.k-in.co.jp.\r\n*hqg6a.cn       IN CNAME   .<\/pre>\n
\u3053\u3093\u306a\u611f\u3058\u306b\u4ed8\u3051\u52a0\u3048\u305f\u3002\u305d\u3057\u305f\u3089\u3001<\/p>\n
% nslookup elettronicasalute.com\r\n;; Got SERVFAIL reply from 192.168.0.35, trying next server\r\nServer:\t\t192.168.0.36\r\nAddress:\t192.168.0.36#53\r\n\r\nNon-authoritative answer:\r\nelettronicasalute.com\tcanonical name = www.k-in.co.jp.\r\nName:\twww.k-in.co.jp\r\nAddress: 192.168.0.35<\/pre>\n
192.168.0.35\u306b\u884c\u3053\u3046\u3068\u3057\u3066\u3044\u308b\u306e\u306f2\u53f0\u306eDNS\u304c\u4e26\u5217\u306b\u76f8\u4e92\u53c2\u7167\u3057\u3066\u3044\u308b\u304b\u3089\u3002
\n\u5225\u306b\u6df1\u3044\u610f\u5473\u306f\u306a\u3044\u3002dhcp\u3067\u8a2d\u5b9a\u3057\u3066\u3044\u308b\u304b\u3089\u3060\u3068\u601d\u3046\u300235\u219236\u21921\u306e\u9806\u306b\u805e\u304d\u306b\u884c\u3063\u305f\u308a\u3059\u308b\u8a2d\u8a08\u3060\u308f\u3002
\n\u30bd\u30ec\u3067\u4eca\u56deDNS Firewall\u306e\u5b9f\u9a13\u306f36\u5074\u3060\u3051\u884c\u3063\u3066\u3044\u308b\u3002
\n\u5931\u6557\u3057\u3066\u308235\u304c\u751f\u304d\u3066\u3044\u308c\u3070\u691c\u7d22\u3067\u304d\u308b\u3057\u306d\u3002
\n\u3057\u304b\u3057\u3001\u3044\u3064\u8fc4\u7d4c\u3063\u3066\u3082spamhaus\u304b\u3089\u30e1\u30fc\u30eb\u304c\u6765\u306a\u3044\u3002
\n\uff08\u305d\u306e2\uff09\u306f\u3044\u3064\u66f8\u3051\u308b\u306e\u3060\u308d\u3046\u2026\u2026\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5510\u7a81\u306b\u300cDNS Firewall\u3092\u4f5c\u3063\u3066\u307f\u3088\u3046\u300d\u3068\u601d\u3063\u305f\u306e\u306f\u3001spamhaus\u306e\u30b5\u30a4\u30c8\u3092\u898b\u3066\u56de\u3063\u305f\u304b\u3089\u3002 \u5358\u306b\u300c\u898b\u3064\u3051\u3061\u3083\u3063\u305f\u304b\u3089\u3084\u3063\u3066\u307f\u308b\u304b\u306a\u300d\u3068\u3044\u3046\u5b89\u6613\u306a\u767a\u60f3\u3067\u3059\u306a\u3041\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[246,115],"tags":[260,243,244],"class_list":["post-11241","post","type-post","status-publish","format-standard","hentry","category-my-macmini-server","category-software","tag-bind9","tag-dns","tag-dns-firewall"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/posts\/11241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/comments?post=11241"}],"version-history":[{"count":3,"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/posts\/11241\/revisions"}],"predecessor-version":[{"id":11246,"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/posts\/11241\/revisions\/11246"}],"wp:attachment":[{"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/media?parent=11241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/categories?post=11241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.k-in.co.jp\/niwakan\/wp-json\/wp\/v2\/tags?post=11241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}