[dns-operations] RCODE for bogon answers

[Florian Weimer]

* Sean Donelan:

> On Tue, 9 Oct 2007, Paul Vixie wrote:
>>> Since its becominging more common to have more administrative controls
>>> on local name servers, such as bogon and name filters, what is the
>>> recommended RCODE for queries denied by policy filters?
>>>
>>> The obvious choice is RCODE=5 (Refused).  But that seems to confuse
>>> a lot of clients.
>>
>> as would any new RCODE.
>
> Then would the best practice be to return the equivilent of NXDOMAIN
> for things blocked by name server policy?

This is a bit rude in the case someone mistakenly points one of their
NSes to your server.