Knot resolver will obey only the first view and users
will be able to resolve the
bad.com domain ... obviously the first view is the match and
no other views are considered afterwards ...
Without multiple policies views are pretty much useless so I believe that I must be doing
something wrong here so could anybody help me on this
You are not missing anything. This is how the view module has worked
since its introduction (before knot-resolver-1.0.0). For details see