Spoofing unbound response for one client?

Question

Domain Name System

Good afternoon!
Tell me how to implement response substitution in unbound only for a specific client?

Answer 1

Patch him.

Answer 2

RPZ feature added in 1.10
https://www.nlnetlabs.nl/news/2020/Feb/20/unbound-...
https://unbound.docs.nlnetlabs.nl/en/latest/topics...
From mana :

server:
  module-config: "respip validator iterator"
  define-tag: "malware social"
  access-control-tag 127.0.0.10/32 "social"
  access-control-tag 127.0.0.20/32 "social malware"
  access-control-tag 127.0.0.30/32 "malware"
rpz:
  name: malware.rpz.example.com
  zonefile: malware.rpz.example.com
  tags: "malware"

Make /32 rule and RPZ zone under it