efa-project.org

Do you happen to know if there is a way to import greylist optout domains from a file? I found scripts for black and white lists but not for greylist.

Have you been able to reproduce the issue?

Well, the way I see it:

Step 1: ability to disable interactive init. Perhaps a separate image or a setting during VM deployment. Then I'll be able to script password change and ssh enable. This can be a part of my VM deployment script.
If you don't want to do that for whatever reason - that's fine ...

Awesome, thank you!

Target remotely from another machine or trigger an execution of local script from remote machine.
Ansible works via ssh.

If this can be done that would be awesome. Thank you for looking at that.

Just to make sure we are on the same page. Ideally we would like to deploy a VM, connect it to the network (i.e. assign IP, gateway etc.) and then run deployment script which will feed it EFA-Config and do other config tasks ...

We are trying to automate EFA deployment with Ansible.
Is there a documentation on what each step of setup script does - config files, command etc. so that it can be scripted?

With recursion disabled and config file posted earlier it takes over 30 minutes for unbound to start. It doesn't matter if it's during server reboot or if I just stop the service and start it manually. Turns out all 30 minutes it's sending DNS requests to outside and firewall with DNS inspection is ...

This is what I have in the file:

forward-zone:
name: "."
forward-addr: 10.0.15.4
forward-addr: 10.0.15.73

Both servers are my active directory domain controllers that are serving the network. I'm sure they are healthy. Also, the issue is happening in 3 different environments.

However it seems ...

Apparently unbound keeps sending requests to external servers during service restart even with recursion disabled and internal forwarders configured.