]> git.ipfire.org Git - thirdparty/knot-resolver.git/commitdiff
modules.policy: REFUSE, TC - clear AD flag in answers
authorGrigorii Demidov <grigorii.demidov@nic.cz>
Thu, 7 Jun 2018 09:02:14 +0000 (11:02 +0200)
committerGrigorii Demidov <grigorii.demidov@nic.cz>
Thu, 7 Jun 2018 09:02:14 +0000 (11:02 +0200)
modules/policy/policy.lua

index df52f33fb099244bf939bfe37ae0cea41369f68a..daba24e897bef5c414964d8b68ece8759c8523ec 100644 (file)
@@ -493,6 +493,7 @@ end
 function policy.REFUSE(_, req)
        local answer = req.answer
        answer:rcode(kres.rcode.REFUSED)
+       answer:ad(false)
        return kres.DONE
 end
 
@@ -500,6 +501,7 @@ function policy.TC(state, req)
        local answer = req.answer
        if answer.max_size ~= 65535 then
                answer:tc(1) -- ^ Only UDP queries
+               answer:ad(false)
                return kres.DONE
        else
                return state