> response-policy { zone "malware.trap"; zone "whitelist.allow" policy
> passthru; };
...
> So which one will take precendence in this case?
Policy processing will search the zone files in the order in which they
appear in the response-policy statement.
So, you need to change the order in your example to achieve the desired
result.
Daniel