Add release note for GL #3247

diff --git a/doc/notes/notes-9.18.9.rst b/doc/notes/notes-9.18.9.rst
index 0de65b93e27c79441aa90638e66ef30bbae69cbc..f04d2dcd8d52fc6a1c800185f062c7478c0c4a0d 100644 (file)
--- a/doc/notes/notes-9.18.9.rst
+++ b/doc/notes/notes-9.18.9.rst
@@ -24,6 +24,10 @@ Bug Fixes
   SERVFAIL answers being sent to clients. This has been fixed.
   :gl:`#3598`
 
+- ``rpz-ip`` rules in :any:`response-policy` zones could be ineffective
+  in some cases if a query had the CD (Checking Disabled) bit set to 1.
+  This has been fixed. :gl:`#3247`
+
 - Previously, if Internet connectivity issues were experienced during
   the initial startup of :iscman:`named`, a BIND resolver with
   :any:`dnssec-validation` set to ``auto`` could enter into a state