Am 01.02.23 um 16:12 schrieb Bjørn Mork: > This sort of "works" for me (although very broken by design, as already > noted): Thank you for providing a work around and testing it. I am still not convinced that the filter-a harms less when a real AAAA is provided instead of the synthesized. It breaks dnssec anyway. Regards, Thomas