From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Thu, 22 Apr 2021 08:38:43 +0000 (+0200)
Subject: dnsdist: Only use eBPF for "drop" actions
X-Git-Tag: dnsdist-1.6.0-rc2~2^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F10327%2Fhead;p=thirdparty%2Fpdns.git

dnsdist: Only use eBPF for "drop" actions
---

diff --git a/pdns/dnsdistdist/dnsdist-dynblocks.cc b/pdns/dnsdistdist/dnsdist-dynblocks.cc
index ceb59ca77b..1c03aedff3 100644
--- a/pdns/dnsdistdist/dnsdist-dynblocks.cc
+++ b/pdns/dnsdistdist/dnsdist-dynblocks.cc
@@ -209,7 +209,7 @@ void DynBlockRulesGroup::addOrRefreshBlock(boost::optional<NetmaskTree<DynBlock>
   db.blocks = count;
   db.warning = warning;
   if (!got || expired || wasWarning) {
-    if (g_defaultBPFFilter) {
+    if (db.action == DNSAction::Action::Drop && g_defaultBPFFilter) {
       try {
         g_defaultBPFFilter->block(requestor);
         bpf = true;