I've been trying to use the blackhole directive in my configs to limit abuse of our resolvers, but it doesn't always seem to block dns queries on all the virtual network interfaces. Is there a way to specify that it do so? Thanks