Why it matters in practice
A resolver may use filtering to enforce a domain policy or reduce access to known unwanted names. The outcome depends on the lists, rule precedence, client path, and DNS configuration. Filtering is not a substitute for network controls, and a successful DNS answer does not establish that a destination is trustworthy.
Example
A resolver configured for a test network returns a blocked response for a domain on its selected deny list.
Educational note
This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.