Actually log validation result on log-fail

diff --git a/pdns/pdns_recursor.cc b/pdns/pdns_recursor.cc
index e04780092058b940ec2f7c067d6b80c55df29739..2a260c284173175d93f5d3f4cbb805e5cffb2aea 100644 (file)
--- a/pdns/pdns_recursor.cc
+++ b/pdns/pdns_recursor.cc
@@ -955,7 +955,7 @@ void startDoResolve(void *p)
           pw.getHeader()->ad=0;
         }
         else if(state == Bogus) {
-          if(sr.doLog()) {
+          if(sr.doLog() || g_dnssecmode == DNSSECMode::ValidateForLog) {
             L<<Logger::Warning<<"Answer to "<<dc->d_mdp.d_qname<<" for "<<dc->d_remote.toStringWithPort()<<" validates as Bogus"<<endl;
           }