REJECT and an upstream server?

[bcookatpcsd]

[2024-07-04 08:44:03]   192.168.88.134  iphonesubmissions.apple.com     HTTPS   REJECT  16ms    dnscry.pt-newyork-ipv4
[2024-07-04 08:44:03]   192.168.88.134  iphonesubmissions.apple.com     A       REJECT  23ms    cs-nyc2

drill -Q iphonesubmissions.apple.com
"This query has been locally blocked" "by dnscrypt-proxy"

same with -t https says it is blocked locally..

others too..

 grep REJECT /tmp/query.log | egrep -v 0ms

[2024-07-04 08:41:56]   192.168.88.131  ofi-sub.osp.opera.software      A       REJECT  604ms   cs-montreal
[2024-07-04 08:41:57]   192.168.88.131  ofi-sub.osp.opera.software      HTTPS   REJECT  778ms   cs-il2
[2024-07-04 08:44:03]   192.168.88.134  iphonesubmissions.apple.com     HTTPS   REJECT  16ms    dnscry.pt-newyork-ipv4
[2024-07-04 08:44:03]   192.168.88.134  iphonesubmissions.apple.com     A       REJECT  23ms    cs-nyc2
[2024-07-04 08:45:40]   192.168.88.134  xp.apple.com    HTTPS   REJECT  16ms    cs-nyc2
[2024-07-04 08:45:41]   192.168.88.134  xp.apple.com    A       REJECT  54ms    dnscrypt.ca-ipv4
[2024-07-04 08:46:20]   192.168.88.250  iphonesubmissions.apple.com     A       REJECT  23ms    cs-dc
[2024-07-04 08:46:41]   192.168.88.250  iphonesubmissions.apple.com     HTTPS   REJECT  34ms    cs-nyc2
[2024-07-04 08:47:19]   192.168.88.134  xp.apple.com    HTTPS   REJECT  17ms    dnscry.pt-philadelphia-ipv4
[2024-07-04 08:47:19]   192.168.88.134  xp.apple.com    A       REJECT  35ms    cs-il
[2024-07-04 08:48:51]   192.168.88.146  mobile.events.data.microsoft.com        A       REJECT  33ms    cs-il
[2024-07-04 08:48:51]   192.168.88.146  mobile.events.data.microsoft.com        A       REJECT  15ms    dnscry.pt-philadelphia-ipv4
[2024-07-04 08:48:56]   192.168.88.146  mobile.events.data.microsoft.com        A       REJECT  22ms    cs-montreal
[2024-07-04 08:49:04]   192.168.88.146  mobile.events.data.microsoft.com        A       REJECT  16ms    dnscry.pt-newyork-ipv4
[2024-07-04 08:52:12]   192.168.88.134  xp.apple.com    HTTPS   REJECT  15ms    dnscry.pt-philadelphia-ipv4
[2024-07-04 08:52:12]   192.168.88.134  xp.apple.com    A       REJECT  18ms    dnscry.pt-philadelphia-ipv4
[2024-07-04 08:53:26]   192.168.88.133  xp.apple.com    HTTPS   REJECT  14ms    dnscry.pt-newyork-ipv4
[2024-07-04 08:53:26]   192.168.88.133  xp.apple.com    A       REJECT  23ms    cs-montreal
[2024-07-04 08:53:56]   192.168.88.131  xp.apple.com    A       REJECT  18ms    dnscry.pt-philadelphia-ipv4
[2024-07-04 08:54:20]   192.168.88.135  xp.apple.com    A       REJECT  16ms    dnscry.pt-newyork-ipv4

but doesn't this mean it got passed upstream?

[bcookatpcsd]

so it's a cname being checked which then is in the blocked-names file..

[I] root@alpine-awow ~/d/u/generate-domains-blocklist (master)# drill xp.apple.com @9.9.9.9
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 15506
;; flags: qr rd ra ; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; xp.apple.com.        IN      A

;; ANSWER SECTION:
xp.apple.com.   2290    IN      CNAME   xp.itunes-apple.com.akadns.net.
xp.itunes-apple.com.akadns.net. 139     IN      CNAME   xp.apple.com.edgekey.net.
xp.apple.com.edgekey.net.       17129   IN      CNAME   e17437.dsct.akamaiedge.net.
e17437.dsct.akamaiedge.net.     8       IN      A       23.198.34.113

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 34 msec
;; SERVER: 9.9.9.9
;; WHEN: Thu Jul  4 09:15:21 2024
;; MSG SIZE  rcvd: 162


[I] root@alpine-awow ~/d/u/generate-domains-blocklist (master)# grep xp.itunes-apple.com /var/tmp/blocked-names.txt
xp.itunes-apple.com.akadns.net