Also check query type

(cherry picked from commit 660a62d41320e484387e3d4671ec36cf0d07b942)

diff --git a/pdns/syncres.cc b/pdns/syncres.cc
index 32f4cd4d5517a472ad6a2fccd0a9ad369711c0c5..a1cc8fc7fc832ac224d213041c2c376460f6db35 100644 (file)
--- a/pdns/syncres.cc
+++ b/pdns/syncres.cc
@@ -3418,7 +3418,7 @@ bool SyncRes::processRecords(const std::string& prefix, const DNSName& qname, co
       lwr.d_rcode == RCode::NXDomain && qname.isPartOf(rec.d_name) && rec.d_name.isPartOf(auth);
 
     bool putInNegCache = true;
-    if (negCacheIndiction && isForwardOrAuth(qname)) {
+    if (negCacheIndiction && qtype == QType::DS && isForwardOrAuth(qname)) {
       // #10189, a NXDOMAIN to a DS query for a forwarded or auth domain should not NXDOMAIN the whole domain
       putInNegCache = false;
     }