bind9 version 9.10.3-P4-Debian doesn't like my rpz configuration (that works on 9.11.5-P1)
Before I get into figuring out how to install a backport, it looks like bind9 isn't the preferred answer anymore - see https://qa.debian.org/popcon-graph.php?packages=bind9&show_installed=on&want_legend=on&want_ticks=on&from_date=2010-01-01&to_date=2019-01-01&hlght_date=&date_fmt=%25Y-%25m&beenhere=1 What are people using these days to 1. have dnssec enabled lookups 2. filter external dns answers Thanks, Lee