[RPZ] Which 'options' section does the RPZ config go in?

[ixloran at sent.at]

> 
> But no trace of rpz.spamhaus.org.zone after ~ 20 mins.  Trying to figure
> out what's different.

Getting these in my logs:

29-Mar-2013 15:59:24.207 query-errors: debug 1: client
192.168.1.53#52859 (rpz.spamhaus.org): view internal: query failed
(SERVFAIL) for rpz.spamhaus.org/IN/SOA at query.c:5748
29-Mar-2013 15:59:50.235 general: debug 1: zone_timer: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.235 general: debug 1: zone_maintenance: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.235 general: debug 1: queue_soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.235 general: debug 1: zone_settimer: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.235 general: debug 1: soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.319 general: debug 1: refresh_callback: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.319 general: debug 1: zone
rpz.spamhaus.org/IN/internal: refresh: rcode (SERVFAIL) retrying without
EDNS master 199.168.90.51#53 (source 0.0.0.0#0)
29-Mar-2013 15:59:50.319 general: debug 1: queue_soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.735 general: debug 1: soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.825 general: debug 1: refresh_callback: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.825 general: info: zone
rpz.spamhaus.org/IN/internal: refresh: unexpected rcode (SERVFAIL) from
master 199.168.90.51#53 (source 0.0.0.0#0)
29-Mar-2013 15:59:50.825 general: debug 1: queue_soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.825 general: debug 1: soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.915 general: debug 1: refresh_callback: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:50.916 general: debug 1: zone
rpz.spamhaus.org/IN/internal: refresh: rcode (SERVFAIL) retrying without
EDNS master 199.168.90.52#53 (source 0.0.0.0#0)
29-Mar-2013 15:59:50.916 general: debug 1: queue_soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.325 general: debug 1: soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.414 general: debug 1: refresh_callback: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.414 general: info: zone
rpz.spamhaus.org/IN/internal: refresh: unexpected rcode (SERVFAIL) from
master 199.168.90.52#53 (source 0.0.0.0#0)
29-Mar-2013 15:59:51.414 general: debug 1: queue_soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.414 general: debug 1: soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.503 general: debug 1: refresh_callback: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.503 general: debug 1: zone
rpz.spamhaus.org/IN/internal: refresh: rcode (SERVFAIL) retrying without
EDNS master 199.168.90.53#53 (source 0.0.0.0#0)
29-Mar-2013 15:59:51.503 general: debug 1: queue_soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.914 general: debug 1: soa_query: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.999 general: debug 1: refresh_callback: zone
rpz.spamhaus.org/IN/internal: enter
29-Mar-2013 15:59:51.999 general: info: zone
rpz.spamhaus.org/IN/internal: refresh: unexpected rcode (SERVFAIL) from
master 199.168.90.53#53 (source 0.0.0.0#0)
29-Mar-2013 15:59:52.000 general: debug 1: zone_settimer: zone
rpz.spamhaus.org/IN/internal: enter

But just for that zone, NOT the drop.* zone ...