From: Otto Moerbeek <otto.moerbeek@open-xchange.com>
Date: Thu, 24 Jul 2025 05:25:13 +0000 (+0200)
Subject: Use unmodified flag for post policy
X-Git-Tag: auth-5.0.0-beta1^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=26c4f7c44ca739fe4a9446677b532e5b56b35806;p=thirdparty%2Fpdns.git

Use unmodified flag for post policy
---

diff --git a/pdns/recursordist/syncres.cc b/pdns/recursordist/syncres.cc
index 9981f7c0f..127a3fbf0 100644
--- a/pdns/recursordist/syncres.cc
+++ b/pdns/recursordist/syncres.cc
@@ -1913,7 +1913,7 @@ int SyncRes::doResolveNoQNameMinimization(const DNSName& qname, const QType qtyp
         }
         /* Apply Post filtering policies */
 
-        if (d_wantsRPZ && !stoppedByPolicyHit) {
+        if (d_wantsRPZ && !d_appliedPolicy.wasHit()) {
           auto luaLocal = g_luaconfs.getLocal();
           if (luaLocal->dfe.getPostPolicy(ret, d_discardedPolicies, d_appliedPolicy)) {
             mergePolicyTags(d_policyTags, d_appliedPolicy.getTags());