Also check query type

diff --git a/pdns/syncres.cc b/pdns/syncres.cc
index 41cda1d9dc159f9c6035492692fad61198fba131..d3c57be009ab00303fe866bdd85dfcb7e8359137 100644 (file)
--- a/pdns/syncres.cc
+++ b/pdns/syncres.cc
@@ -3428,7 +3428,7 @@ bool SyncRes::processRecords(const std::string& prefix, const DNSName& qname, co
       lwr.d_rcode == RCode::NXDomain && qname.isPartOf(rec.d_name) && rec.d_name.isPartOf(auth);
 
     bool putInNegCache = true;
-    if (negCacheIndiction && isForwardOrAuth(qname)) {
+    if (negCacheIndiction && qtype == QType::DS && isForwardOrAuth(qname)) {
       // #10189, a NXDOMAIN to a DS query for a forwarded or auth domain should not NXDOMAIN the whole domain
       putInNegCache = false;
     }