From a2e0174cc87822b45fc122a5570acc5aa24abb29 Mon Sep 17 00:00:00 2001
From: bert hubert <bert.hubert@netherlabs.nl>
Date: Wed, 22 Jun 2016 16:38:37 +0200
Subject: [PATCH] do EDNS over TCP/IP as well so we can actually get DNSSEC
 signatures. In 2016.

---
 pdns/lwres.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pdns/lwres.cc b/pdns/lwres.cc
index 758296f8d0..fa2ee83fdb 100644
--- a/pdns/lwres.cc
+++ b/pdns/lwres.cc
@@ -79,7 +79,7 @@ int asyncresolve(const ComboAddress& ip, const DNSName& domain, int type, bool d
 
   string ping;
   bool weWantEDNSSubnet=false;
-  if(EDNS0Level && !doTCP) {
+  if(EDNS0Level) { 
     DNSPacketWriter::optvect_t opts;
     if(srcmask) {
       EDNSSubnetOpts eo;
-- 
2.47.3