deny-answer-addresses in log-only mode?

[Phil Mayers]

All,

I'm curious to find which of our users have created external domains 
pointing at our internal IPs (for legitimate purposes); it would be 
useful to find as many as possible so we know about them.

Is it possible to run the deny-answer-addresses code in "log only" mode, 
similar to the RPZ DISABLED action?

Or, can RPZ be re-purposed for this?

Just curious - it's not a big deal.

Cheers,
Phil