From: Peter van Dijk <peter.van.dijk@netherlabs.nl>
Date: Fri, 20 Feb 2015 09:18:47 +0000 (+0100)
Subject: respond REFUSED instead of NOERROR for "unknown zone" situations
X-Git-Tag: dnsdist-1.0.0-alpha1~248^2~119^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F2259%2Fhead;p=thirdparty%2Fpdns.git

respond REFUSED instead of NOERROR for "unknown zone" situations
---

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 651beb1384..d0c6d45d40 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1160,7 +1160,8 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
         addRootReferral(r);
       }
       else {
-        DLOG(L<<Logger::Warning<<"Setting 'No Error'"<<endl);
+        if (!retargetcount)
+          r->setRcode(RCode::Refused); // send REFUSED - but only on empty 'no idea'
       }
       goto sendit;
     }