Don't remove RRSIG RR from answers to ANY queries when the do bit is not set.

diff --git a/src/rfc1035.c b/src/rfc1035.c
index 32df31ad603ce1ef94592b00d30f3591d8acb970..5828055caa5db86f00919d43a2aeb9a47d312e2d 100644 (file)
--- a/src/rfc1035.c
+++ b/src/rfc1035.c
@@ -1608,6 +1608,11 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,
       GETSHORT(qtype, p); 
       GETSHORT(qclass, p);
 
+      /* Don't filter RRSIGS from answers to ANY queries, even if do-bit
+        not set. */
+      if (qtype == T_ANY)
+       *do_bit = 1;
+
       ans = 0; /* have we answered this question */
       
       if (qtype == T_TXT || qtype == T_ANY)