BIND RPZ is not blocking A record

[Nick Tait]

On 14/11/2024 7:48 pm, Blason R wrote:
> And here is zone file
>
> $TTL 180
> @               IN      SOA     ns1.custom.block. ns1.custom.block.
> ( 2006060301 21600 3600 604800 3600 )
>              IN  NS    ns1.custom.block.
> ns1.custom.block.       IN  A   172.1.xx.xx
> wg.custom.block.        IN  A   172.1.xx.xx
> app.hubspot.com        CNAME   wg.custom.block.

Hi Blason.

If you want app.hubspot.com to return NXDOMAIN response, try changing 
the CNAME target to "." - i.e.:

app.hubspot.com        CNAME   .

Nick.