On Wed, Sep 18, 2024 at 02:57:22PM +0200,
Vladimír Čunát via knot-resolver-users <knot-resolver-users(a)lists.nic.cz> wrote
a message of 73 lines which said:
So I turned on debug logging by
log_groups({'rebind'}) and it looks blocked
correctly:
...
Note that the module is sensitive even about records
that might not get into
the final answer sent to the client.
It seems a bad idea to remove all the answers if there is even one RFC
1918 address in the set. (Unless may be if it is signed.)