I think Chris is right here. IIRC even qname policies perform an upstream query
- we've seen this reflected in response times.
I don't know what it does for servfail but it would certainly be reasonable to
pass them unchanged. Remember rpz is deliberately limited.
--
Sent from my phone with, please excuse brevity and typos
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
