From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Mon, 11 Jan 2016 17:31:08 +0000 (+0100)
Subject: Mark servfail.nl as bogus
X-Git-Tag: dnsdist-1.0.0-alpha2~90^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=be4e62d7f22a015b561adeadf1a0355fd8938bf7;p=thirdparty%2Fpdns.git

Mark servfail.nl as bogus

if we have keys, but could validate nothing, consider the situation Bogus.
---

diff --git a/pdns/validate-recursor.cc b/pdns/validate-recursor.cc
index 4b951d97e2..2012ed6203 100644
--- a/pdns/validate-recursor.cc
+++ b/pdns/validate-recursor.cc
@@ -68,5 +68,7 @@ vState validateRecords(const vector<DNSRecord>& recs)
   //  cerr<<"Took "<<sro.d_queries<<" queries"<<endl;
   if(validrrsets.size() == cspmap.size())
     return Secure;
+  if(keys.size())
+    return Bogus;
   return Insecure;
 }