---
title: Import RPZ lists
slug: legacy/import-rpz-lists
description: Unlock seamless DNS management with our Import RPZ Lists service! Easily import your personal RPZ lists to the DNS Proxy, with updates every 30 minutes. 
docTags: 
createdAt: 2024-08-05T07:59:08.569Z
---

The Import RPZ lists service allows personal RPZ lists (e.g., [https://threatfox.abuse.ch/downloads/threatfox.rpz](https://threatfox.abuse.ch/downloads/threatfox.rpz)) to be imported to the DNS Proxy.

File change control and eventual import is performed every 30 minutes.

To manage the service access the admin panel under A Advanced configuration » \[Z] - Import RPZ lists.



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/go8dR09IlrSNAZXWj4IYf_image.png" size="50" width="405" height="262" position="center" caption="Prompt" alt="Import RPZ Lists" showCaption="true"}

It is advisable to block Proxy & Bypass Filters on the Cloud panel for proper operation of RPZ policies.



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/xB693FAf7JX4MMWWq5nEa_image.png" size="50" width="902" height="121" position="center" caption="Cloud Panel" alt="Block Proxy and Bypass Filters on the Cloud" showCaption="true"}

##



<font color="#ff361d">**1.** </font>Access the Import RPZ list menu.

<font color="#ff361d">**2**</font><font color="#ff361d">**.** </font>Activate the service by typing y and pressing ENTER.

<font color="#ff361d">**3**</font><font color="#ff361d">**.** </font>On the next screen, type y and press ENTER to create the fsupload user (wait for the procedure to run).

<font color="#ff361d">**4**</font><font color="#ff361d">**.** </font>On the next screen, type y and press ENTER to proceed to enter the password on the fsupload user.

It is always possible to change the password from the Change fsupload password menu.

##

To import an RPZ list, an SFTP client (e.g., FileZilla or Linux/Windows sftp) must be used.

##



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/NCw-6IY3xa-Z8aRKAK2b4_image.png" size="50" width="713" height="207" position="center" caption="SFP " alt="SFTP Access Parameters" showCaption="true"}

**Standard access mode:**


With any SFTP client connect with the listed parameters and the password chosen during configuration.

**SSH key access mode**


Enable the access mode from the Change configuration menu and enter the SSH keys of the machines enabled to access via the Manage SSH Keys » Add key.

##

The following formats are supported:

- Standard RPZ zone files
- List Domains

### Standard RPZ zone files

Standard RPZ files with Policy Triggers and Policy Actions


**Example RPZ zones:**



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/M7_gX_Gpp6YzETWW82XuZ_image.png" size="50" width="723" height="340" position="center" caption="RPZ" alt="RPZ Zones" showCaption="true"}

**Domain List**


It is possible to import a list of domains to be blocked and define policies for the list.

The policy definition must be entered in the first line respecting the following format:



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/0X6415wrxow9RfO7QN7JV_image.png" size="50" width="717" height="66" position="center" caption="Format" alt="Policy Definition" showCaption="true"}

**Variables definition**

- block\_type
  indicates the block type, enter one of these values.
- block
  the domain is blocked with not-existent domain error.
- send\_to\_ip
  the domain is resolved with the IP given in destination.
- send\_to\_domain
  the domain is resolved with the domain specified in destination.
- destination
  mandatory if block\_type is send\_to\_ip or send\_to\_domain, indicates the IP or domain to resolve.

**Example file with resolution to the domain example.com**



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/J64QGpGS_YZIOCv75Liz9_image.png" size="50" width="725" height="211" position="center" caption="Example.com Domain" alt="Resolution to the Example Domain" showCaption="true"}

**Entering RPZ into the configuration**

- Log in sftp to the machine with the user fsupload.
- Access the fsupload/rpz/ folder.
- Upload the file with the extension .load.
- Wait for the timing of the procedure or, to perform the import immediately, access the Check RPZ lists now menu.

##

- Log in sftp to the machine with the user fsupload.
- Access the fsupload/rpz/ folder.
- Remove the file with the .db extension.
- Wait for the timing of the procedure or, to perform the removal immediately, access the Check RPZ lists now menu.

##

- Log in sftp to the machine.
- Access the fsupload/rpz/ folder.
- Download the files with the extension .error and remove it from the folder.
- Open the file with a text editor and move to the end of the file to check the error.
- Correct the file and retry RPZ Insertion in the configuration.

## List import example

The example below shows the import of an RPZ file using the sftp command, available on both Windows and Linux, in SSH key access mode.


**Notes:** the first time you log in you will be asked for permission to log in, type yes and press ENTER.



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/zJ8rgZaFQ1npS0zuK_bA0_image.png" size="50" width="716" height="212" position="center" caption=" RPZ file using the sftp" alt="the import of an RPZ file using the sftp command," showCaption="true"}

## Menu Import RPZ List&#x20;



::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/gvvToHsYEuJfYtAXrx6lm_image.png" size="50" width="453" height="300" position="center" caption="import menu" alt="Menu Import RPZ List " showCaption="true"}

## <font color="#000000">Disable service / Enable service</font>

Access the menu to disable or enable the RPZ import service.

### Disable service

<font color="#ff361d">**1.** </font>Access the \[D] - Disable service menu.

<font color="#ff361d">**2.**</font><font color="#ff9900"> </font>Type y and press ENTER to confirm deactivation (wait for the procedure to run).
Access the menu to disable or enable the RPZ import service.

### Enable service

<font color="#ff361d">**1.** </font>Go to the main menu Import RZP lists.

<font color="#ff361d">**2.**</font> Type y and press ENTER to confirm activation (wait for the procedure to be executed).
Notes: if the fsupload user was not present it will be created and configured

## Change configuration

Enable access via public SSH key

<font color="#ff361d">**1.** </font>Access the \[C] - Change configuration menu.

<font color="#ff361d">**2.**</font> Type y and press ENTER to set up access.

<font color="#ff361d">**3.** </font>Type y and press ENTER to immediately manage the enabled SSH keys,
or type n and press ENTER to return to the Import RPZ lists menu. It is possible to manage SSH enabled keys from the menu.

## Manage SSH Keys

Through this menu you can manage the SSH keys authorized for access.

<font color="#ff361d">**1.** </font>Access the \[M] - Manage SSH Keys menu.

### View authorized keys

<font color="#ff361d">**1.**</font> Access the \[V] - View authorized keys menu. <font color="#ff361d">**2.**</font> If there are multiple SSH keys, the system divides the view into blocks, press the space bar to display the next block.

### Add key

<font color="#ff361d">**1.**</font> Access the \[A] - Add key menu. <font color="#ff361d">**2.**</font> Enter an identifying name for the key and press ENTER, only letters, numbers and \_ character are allowed.
This name will be used when deleting the key <font color="#ff361d">**3.**</font> Enter/Copy the SSH key of the machine authorized to access and press ENTER (*wait for the procedure to be executed*).

### Delete key

To delete an SSH key you need to know the idenfiticative name given to the chive when entering it.

If you do not remember the name à you can view it through the <u>**Manage SSH Keys » View authorized keys**</u> menu.
 <font color="#ff361d">**1.**</font> Access the \[D] - Delete single key menu. <font color="#ff361d">**2.**</font> Enter the idenficative name of the key to be deleted and press ENTER (*wait for the procedure to run*).

### Clear all keys

Through this menu all SSH keys will be cleared:
 <font color="#ff361d">**1.**</font> Access the \[C] - Clear all keys menu. <font color="#ff361d">**2.**</font> Type y and press ENTER to confirm the deletion (*wait for the procedure to run*).

##

<font color="#ff361d">**1.**</font> Access the \[P] - Change fsupload password menu. <font color="#ff361d">**2.** </font>Type y and press ENTER to proceed to enter the password on the fsupload user.&#x20;

## Check RPZ lists now

Checking the lists to be imported is done automatically every 30 minutes if execution is needed access this menu.
 <font color="#ff361d">**1.**</font> Access the \[I] - Check RPZ lists now menu. <font color="#ff361d">**2.**</font> Type y and press ENTER to confirm the check (*wait for the procedure to run*). <font color="#ff361d">**3.**</font> When finished, the system will show <u>**the current import status**</u>.

## View RPZ lists import status

<font color="#ff361d"> </font> Access the \[S] - View RPZ lists import status menu.

<font color="#ff361d">**2.**</font> Type y and press ENTER to confirm (*wait for the procedure to run*).

## Legend

- Last check/Last import » last check performed.
- Last check: indicates that the check was performed but no changes were present.
- Last import: indicates that the check was performed and changes were made.
- Loaded » RPZ lists successfully loaded into the file configuration with .db extension.
- To be parsed » RPZ lists that need to be checked by the system files with .load extension.
- To be removed » RPZ lists to be removed, they are loaded in the configuration but no longer have .db files in the folder.
- Error » RPZ lists that were checked but generated error and were not loaded into the configuration files with extension .erro



**Other ways to ask**:

- The Import RPZ lists service allows personal RPZ lists
- How to Import RPZ lists.