Re: Recursor 5.4.0: RPZ matches on '.' root query, breaks DNSSEC validation (Indeterminate instead of Bogus)

Brian Candler via Pdns-users <[email protected]> Mon, 20 Apr 2026 11:51:50 +0100

Newsgroups	gmane.network.dns.powerdns.user
Message-ID	<[email protected]>

On 20/04/2026 10:58, Otto Moerbeek via Pdns-users wrote:
> which could lead to unexpected matches as well.  I have to think if it
> is possible to skip those as well, though this is dangerous territory,
> as afaik we have no defined way to distinguish actual custom records
> from these kind of "meta" records.

An option to skip everything at the RPZ apex?