From 9407d9e266b0b5c5833c1449ef4316987a7e1b67 Mon Sep 17 00:00:00 2001 From: Tony Finch Date: Wed, 1 Aug 2018 14:01:48 +0100 Subject: [PATCH] RPZ now treats covering NSEC records the same as negative answers --- lib/ns/query.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/ns/query.c b/lib/ns/query.c index c3bf4e8c454..fdff214288d 100644 --- a/lib/ns/query.c +++ b/lib/ns/query.c @@ -3977,6 +3977,7 @@ rpz_rewrite(ns_client_t *client, dns_rdatatype_t qtype, case DNS_R_EMPTYWILD: case DNS_R_NCACHENXDOMAIN: case DNS_R_NCACHENXRRSET: + case DNS_R_COVERINGNSEC: case DNS_R_CNAME: case DNS_R_DNAME: qresult_type = qresult_type_restart; -- GitLab