From: Peter van Dijk <peter.van.dijk@netherlabs.nl>
Date: Fri, 20 Feb 2015 09:18:47 +0000 (+0100)
Subject: respond REFUSED instead of NOERROR for "unknown zone" situations
X-Git-Tag: auth-3.3.2~2^2~18
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=194f4d2d70c008f88846b3d157ffdef1b06a0b82;p=thirdparty%2Fpdns.git

respond REFUSED instead of NOERROR for "unknown zone" situations
---

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 03c4c95364..c7932c78ab 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1099,7 +1099,8 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
         addRootReferral(r);
       }
       else {
-        DLOG(L<<Logger::Warning<<"setting 'No Error'"<<endl);
+        if (!retargetcount)
+          r->setRcode(RCode::Refused); // send REFUSED - but only on empty 'no idea'
       }
       goto sendit;
     }