deny-answer-addresses in log-only mode?

[Daniel Stirnimann]

Hi Phil,

You can use RPZ for that with a zone record of:
32.1.0.0.127.rpz-ip     CNAME   rpz-passthru.

See "Response Policy Zone (RPZ) Rewriting"
http://ftp.isc.org/isc/bind9/cur/9.9/doc/arm/Bv9ARM.ch06.html

Daniel