Right. We work upstream on combining these rules better.
In the meantime, you can unblock the subtree. EDIT after months: I’m sorry, it does not work due to another issue.
- Add custom configuration file, e.g. as described on
Knot resolver (i.e. kresd) - DNS advanced settings for Omnia and MOX [Turris wiki] - Put a line into it:
policy.add(policy.suffix(policy.PASS, {todname('home.arpa.')}))
- Apply, e.g. by command
/etc/init.d/resolver restart
(Queries to non-existing names may then leak to upstream resolver, contrary what the RFC requires.)