From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Tue, 12 Jan 2016 17:23:42 +0000 (+0100)
Subject: reduce breakage for insecure domains
X-Git-Tag: dnsdist-1.0.0-alpha2~90^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F3216%2Fhead;p=thirdparty%2Fpdns.git

reduce breakage for insecure domains

Send DS queries to parent side of zone cut instead of child
---

diff --git a/pdns/syncres.cc b/pdns/syncres.cc
index 9659966858..5b3321bdac 100644
--- a/pdns/syncres.cc
+++ b/pdns/syncres.cc
@@ -430,6 +430,7 @@ int SyncRes::doResolve(const DNSName &qname, const QType &qtype, vector<DNSRecor
   LOG(prefix<<qname.toString()<<": No cache hit for '"<<qname.toString()<<"|"<<qtype.getName()<<"', trying to find an appropriate NS record"<<endl);
 
   DNSName subdomain(qname);
+  if(qtype == QType::DS) subdomain.chopOff();
 
   set<DNSName> nsset;
   bool flawedNSSet=false;