Rule:
1. Block all query
2. Allow query for each local zone
(more…)