Re: RPZ and DNS traffic on the server

Hi Daniel, Thank you very much! It was exactly what I was looking for. On Tue, Feb 12, 2019 at 4:03 PM Daniel Stirnimann < daniel.stirnim...@switch.ch> wrote: > > Hello Alex, > > > Is this expected behaviour? Is there any way to make the server avoid > > proceeding with the resolution, when the

Re: RPZ and DNS traffic on the server

Hello Alex, > Is this expected behaviour? Is there any way to make the server avoid > proceeding with the resolution, when the initial client requests is > blocked? Yes, this is expected behavior. You need "qname-wait-recurse no" to change the behavior: response-policy { zone "rpz-whitelist-