> response-policy { zone "malware.trap"; zone "whitelist.allow" policy > passthru; }; ... > So which one will take precendence in this case? Policy processing will search the zone files in the order in which they appear in the response-policy statement. So, you need to change the order in your example to achieve the desired result. Daniel