On Wed, Sep 18, 2024 at 02:57:22PM +0200,
 Vladimír Čunát via knot-resolver-users <knot-resolver-users(a)lists.nic.cz> wrote
 a message of 73 lines which said:
  So I turned on debug logging by
log_groups({'rebind'}) and it looks blocked
 correctly: 
...
  Note that the module is sensitive even about records
that might not get into
 the final answer sent to the client. 
It seems a bad idea to remove all the answers if there is even one RFC
1918 address in the set. (Unless may be if it is signed.)