respond REFUSED instead of NOERROR for "unknown zone" situations

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 03c4c95364f9ef29945d322915414e545cd96751..c7932c78ab8d2f7a679d1803bbf915dabd865bd3 100644 (file)
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1099,7 +1099,8 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
         addRootReferral(r);
       }
       else {
-        DLOG(L<<Logger::Warning<<"setting 'No Error'"<<endl);
+        if (!retargetcount)
+          r->setRcode(RCode::Refused); // send REFUSED - but only on empty 'no idea'
       }
       goto sendit;
     }