do not set DO bit + EDNS by default (some servers return FORMERR on edns)

just use -D if you want dnssec handling

diff --git a/drill/drill.c b/drill/drill.c
index 05c7177e6ad0a90e1db4176f209d946d7098045b..8d17c2cafdd7ee21e6ccf7ae8512e992b96a308f 100644 (file)
--- a/drill/drill.c
+++ b/drill/drill.c
@@ -376,14 +376,6 @@ main(int argc, char *argv[])
        }
 
 
-       /* if we're asking for DNSSEC records, act as if -D with given */
-       if (type == LDNS_RR_TYPE_DNSKEY ||
-                       type == LDNS_RR_TYPE_RRSIG || 
-                       type == LDNS_RR_TYPE_DS || 
-                       type == LDNS_RR_TYPE_NSEC) {
-               qdnssec = true;
-       }
-
        /* set the nameserver to use */
        if (!serv) {
                /* no server given make a resolver from /etc/resolv.conf */