From 6a2d34cd2442c8c65e3e4223ff9e9af5f1bb5ddc Mon Sep 17 00:00:00 2001
From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Thu, 22 Apr 2021 10:38:43 +0200
Subject: [PATCH] dnsdist: Only use eBPF for "drop" actions

---
 pdns/dnsdistdist/dnsdist-dynblocks.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pdns/dnsdistdist/dnsdist-dynblocks.cc b/pdns/dnsdistdist/dnsdist-dynblocks.cc
index ceb59ca77b..1c03aedff3 100644
--- a/pdns/dnsdistdist/dnsdist-dynblocks.cc
+++ b/pdns/dnsdistdist/dnsdist-dynblocks.cc
@@ -209,7 +209,7 @@ void DynBlockRulesGroup::addOrRefreshBlock(boost::optional<NetmaskTree<DynBlock>
   db.blocks = count;
   db.warning = warning;
   if (!got || expired || wasWarning) {
-    if (g_defaultBPFFilter) {
+    if (db.action == DNSAction::Action::Drop && g_defaultBPFFilter) {
       try {
         g_defaultBPFFilter->block(requestor);
         bpf = true;
-- 
2.47.2