diff --git a/lib/dns/include/dns/result.h b/lib/dns/include/dns/result.h
index 3afdc14892..08eadf618c 100644
--- a/lib/dns/include/dns/result.h
+++ b/lib/dns/include/dns/result.h
@@ -35,8 +35,9 @@ typedef unsigned int dns_result_t;
 #define DNS_R_BADLABELTYPE		12
 #define DNS_R_BADPOINTER		13
 #define DNS_R_TOOMANYHOPS		14
+#define DNS_R_DISALLOWED		15
 
-#define DNS_R_LASTENTRY			14	/* Last entry on list. */
+#define DNS_R_LASTENTRY			15	/* Last entry on list. */
 
 #define DNS_R_UNEXPECTED		0xFFFFFFFFL
 
diff --git a/lib/dns/result.c b/lib/dns/result.c
index 2aab17aa51..c57b5c6c7e 100644
--- a/lib/dns/result.c
+++ b/lib/dns/result.c
@@ -35,6 +35,7 @@ static char *text_table[DNS_R_LASTENTRY + 1] = {
 	"bad label type",			/* 12 */
 	"bad compression pointer",		/* 13 */
 	"too many hops",			/* 14 */
+	"disallowed (by application policy)",	/* 15 */
 };
 
 char *