<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello,<div class=""><br class=""></div><div class="">I have a basic question regarding RPZ on Bind 9.11.x.</div><div class=""><br class=""></div><div class="">Is it possible to re-write a response on a reverse lookup ? For instance, if I considered <span class=""><a href="http://example.com" class="">example.com</a></span><span class=""> a “bad domain”, can I write a RPZ policy so that a reverse lookup of IP’s that map to <a href="http://example.com" class="">example.com</a> fails or is blocked ?</span></div><div class=""><br class=""></div><div class="">I know I can do this with a forward lookup to generate NXDOMAIN:</div><div class=""><br class=""></div><div class=""><font face="Courier New" class="">; Forward resolution of: <span class=""><a href="http://example.com" class="">example.com</a></span><span class=""> and subdomains generates: NXDOMAIN</span></font></div><div class=""><font face="Courier New" class=""><br class=""></font></div><div class=""><span class=""><span class=""><font face="Courier New" class=""><a href="http://example.co" class="">example.co</a>m IN CNAME .</font></span></span></div><div class=""><font face="Courier New" class="">*.<span class=""><a href="http://example.com" class="">example.com</a></span><span class=""> </span><span class="">IN CNAME .</span></font></div><div class=""><br class=""></div><div class="">…but can this also be done on reverse lookups ?</div><div class=""><br class=""></div><div class="">Thanks,</div><div class=""><br class=""></div><div class="">- J</div></body></html>