Creating an RPZ with BIND9

db.rpz

$TTL 60
@            IN    SOA  localhost. root.localhost.  (
                          2015112501   ; serial
                          1h           ; refresh
                          30m          ; retry
                          1w           ; expiry
                          30m)         ; minimum
                   IN     NS    localhost.

localhost                  A        127.0.0.1
xyz.domain.com             A        192.168.i.j
klm.otherdomain.com        A        192.168.x.y

named.conf

//
// Do any local configuration here
//
zone "rpz" {
  type master;
  file "/etc/bind/db.rpz";
};

named.options

options {
        directory "/var/cache/bind";

        forwarders {
                a.b.c.d;
                e.f.g.h;
        };

        ...

        response-policy { zone "rpz"; };
};