diff --git a/coolDns.go b/coolDns.go
index 22026f7..86178b4 100644
--- a/coolDns.go
+++ b/coolDns.go
@@ -171,6 +171,7 @@ func createServer(zones []zone, config config, aclList map[string]*net.IPNet) *d
 				if !passed {
 					m := new(dns.Msg)
 					m.SetReply(r)
+					m.SetRcode(r, dns.RcodeRefused)
 					w.WriteMsg(m)
 					return
 				}