policy: implement NXDOMAIN for onion.

diff --git a/modules/policy/policy.lua b/modules/policy/policy.lua
index dfe37c30e9f26c6d4bf635c53a3bab2291ebbda7..1183883f2462bc51aa9c2d1b1d781448e418c164 100644 (file)
--- a/modules/policy/policy.lua
+++ b/modules/policy/policy.lua
@@ -555,6 +555,7 @@ policy.special_names = {
                cb=policy.suffix(policy.DENY, {
                        todname('test.'),
                        todname('invalid.'),
+                       todname('onion.'), -- RFC7686, 2.4
                        }),
                count=0
        },