From 98f9c5fb26d158e280a75bbf412d00fd237e2eb9 Mon Sep 17 00:00:00 2001 From: Tony Finch Date: Wed, 1 Aug 2018 14:01:48 +0100 Subject: [PATCH] RPZ now treats covering NSEC records the same as negative answers (cherry picked from commit 9407d9e266b0b5c5833c1449ef4316987a7e1b67) --- lib/ns/query.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/ns/query.c b/lib/ns/query.c index 17effd7aff2..666675290dd 100644 --- a/lib/ns/query.c +++ b/lib/ns/query.c @@ -3954,6 +3954,7 @@ rpz_rewrite(ns_client_t *client, dns_rdatatype_t qtype, case DNS_R_EMPTYWILD: case DNS_R_NCACHENXDOMAIN: case DNS_R_NCACHENXRRSET: + case DNS_R_COVERINGNSEC: case DNS_R_CNAME: case DNS_R_DNAME: qresult_type = qresult_type_restart; -- GitLab