On Fri, Jun 7, 2019 at 8:18 PM Viktor Dukhovni via Unbound-users <[email protected]> wrote: > > Is it possible to quickly SERVFAIL queries for data handled by a > particular set of remote nameservers? > > I tried a combination of: > > local-data: "some-ns.example. IN A 127.0.0.1" > do-not-query-address: 127.0.0.0/8 > > but I still see queries going to the underlying remote IPs, the > "local-data" setting does not appear to affect the infra-IP resolution > for the zones served by the server in question.
Sorry for answering with a question, but would DNS RPZ work in this case for what you're describing? -- Darren Spruell [email protected]
