Add release note for GL #3247

diff --git a/doc/notes/notes-9.16.35.rst b/doc/notes/notes-9.16.35.rst
index 8c0c9dcc15cd8c219be876639deecf1122eb7d15..f0ad4507845d390d7c1c91f52f5a7ae1032f1028 100644 (file)
--- a/doc/notes/notes-9.16.35.rst
+++ b/doc/notes/notes-9.16.35.rst
@@ -23,6 +23,10 @@ Bug Fixes
   SERVFAIL answers being sent to clients. This has been fixed.
   :gl:`#3598`
 
+- ``rpz-ip`` rules in ``response-policy`` zones could be ineffective in
+  some cases if a query had the CD (Checking Disabled) bit set to 1.
+  This has been fixed. :gl:`#3247`
+
 - Previously, if Internet connectivity issues were experienced during
   the initial startup of :iscman:`named`, a BIND resolver with
   ``dnssec-validation`` set to ``auto`` could enter into a state where