Blocking .zip domains with DNS proxy

Background

The code snippet below will cause a Mikrotik DNS proxy to return 127.255.255.127 for all .zip domains, including all subdomains.

/ip dns static
add address=127.255.255.127 comment="block access to all .zip domains" regexp=".+\\.zip\$" ttl=10s

The requirement for this to work of course is that all of the hosts on the network only source their DNS through the Mikrotik DNS proxy.

#end