[Pdns-users] forward zone VS rpz with recursor?

[Brian Candler]

On 11/02/2026 18:17, listy via Pdns-users wrote:
> I forward-zones & use RPZ at the same time - resolvers cannot get to 
> forwarded domains - could it be that RPZ takes precedence over 
> forwarding and if so can this be tweaked so it does not? 

What version of pdns-recursor?

Can you give an example of the behaviour:

* configuration of forwarded domains
* configuration of RPZ
* whether RPZ data overlaps with the forwarded domains
* what the client queries and what response it gets

Could it be that the issue is really with DNSSEC and you need a Negative 
Trust Anchor?