From: Kees Monshouwer <mind04@monshouwer.org>
Date: Fri, 28 Feb 2014 08:58:33 +0000 (+0100)
Subject: limit mode 0 closest provable encloser to optout
X-Git-Tag: rec-3.6.0-rc1~156^2^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F1308%2Fhead;p=thirdparty%2Fpdns.git

limit mode 0 closest provable encloser to optout
---

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index e970a649c8..68a299541f 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -618,7 +618,7 @@ void PacketHandler::addNSEC3(DNSPacket *p, DNSPacket *r, const string& target, c
 
     getNSEC3Hashes(narrow, sd.db, sd.domain_id,  hashed, false, unhashed, before, after, mode);
 
-    if ((mode == 0 ||  mode == 1) && (hashed != before)) {
+    if (((mode == 0 && ns3rc.d_flags) ||  mode == 1) && (hashed != before)) {
       DLOG(L<<"No matching NSEC3, do closest (provable) encloser"<<endl);
 
       bool doBreak = false;