On 17/09/2018 14:34, Vladimír Čunát wrote:

Hello.

On 9/14/18 3:11 PM, Bratislav ILIC wrote:

Knot resolver will obey only the first view and users will be able to resolve the bad.com domain ... obviously the first view is the match and no other views are considered afterwards ...

Without multiple policies views are pretty much useless so I believe that I must be doing something wrong here so could anybody help me on this

You are not missing anything.  This is how the view module has worked

since its introduction (before knot-resolver-1.0.0).  For details see

https://gitlab.labs.nic.cz/knot/knot-resolver/merge_requests/678

Let me add that we have decided to change semantics so it will work the
same way as with policies - this change will be part of next 3.y release.

--
Petr Špaček  @  CZ.NIC
--
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-resolver-users