From cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3 Mon Sep 17 00:00:00 2001
From: Evan Hunt <each@isc.org>
Date: Mon, 25 Feb 2013 14:35:41 -0800
Subject: [PATCH] [master] added more info to RPZ change note

---
 CHANGES | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/CHANGES b/CHANGES
index 1ff2db1b6b..56ec886834 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,7 +1,11 @@
 3496.	[placeholder]
 
-3495.	[func]		Support multiple response-policy zones, while
-			improving RPZ performance. [RT #32476]
+3495.	[func]		Support multiple response-policy zones (up to 32),
+                        while improving RPZ performance.  "response-policy"
+			syntax now includes a "min-ns-dots" clause, with
+			default 1, to exclude top-level domains from
+			NSIP and NSDNAME checking. --enable-rpz-nsip and
+                        --enable-rpz-nsdname are now the default. [RT #32251]
 
 3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
 			amplification attacks by rate-limiting substantially-