diff --git a/doc/notes/notes-9.19.7.rst b/doc/notes/notes-9.19.7.rst
index 754f84ed22..5cf561d957 100644
--- a/doc/notes/notes-9.19.7.rst
+++ b/doc/notes/notes-9.19.7.rst
@@ -38,6 +38,10 @@ Bug Fixes
   SERVFAIL answers being sent to clients. This has been fixed.
   :gl:`#3598`
 
+- ``rpz-ip`` rules in :any:`response-policy` zones could be ineffective
+  in some cases if a query had the CD (Checking Disabled) bit set to 1.
+  This has been fixed. :gl:`#3247`
+
 - Previously, if Internet connectivity issues were experienced during
   the initial startup of :iscman:`named`, a BIND resolver with
   :any:`dnssec-validation` set to ``auto`` could enter into a state