RPZ answer me NXDOMAIN for some domain

[Ondřej Surý]

> On 22. 3. 2023, at 14:26, BONIN Nathanael <BONIN.N at mipih.fr> wrote:
> 
> If I add break-dnssec yes ; in my bind conf, it seems to works like I wanted to !!! Thanks.

+1

> But what I don’t understand is why, when I use directly SrvA (server that have RPZ zone), it works ?

That's something that's impossible to answer without seeing the full configuration (named-checkconf -px).

Ondrej
--
Ondřej Surý (He/Him)
ondrej at isc.org

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.