On Tue, Nov 12, 2019 at 09:05:29AM +0100,
Vladimír Čunát <vladimir.cunat(a)nic.cz> wrote
a message of 24 lines which said:
Right, normal policy rules only apply once before
request starts.
So, same thing for RPZ?
The only easy solution I can think of is to use hints
module, assuming
it's sufficient to (1) block particular names (not subtrees)
Unfortunately no, in that case.
People usually don't seem to think of this
imperatively (what
actions to do at some points in the resolution process) but more
like modifying the official DNS tree.
Well, now that a *lot* of Web sites are using this technique to hide
the fact that they use 3rd-party cookies, I tend to think it is
important to have a solution.