From: Grigorii Demidov <grigorii.demidov@nic.cz>
Date: Thu, 7 Jun 2018 09:02:14 +0000 (+0200)
Subject: modules.policy: REFUSE, TC - clear AD flag in answers
X-Git-Tag: v2.4.0~26^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ff4fbd35972f49624edce981edf1980ac4807389;p=thirdparty%2Fknot-resolver.git

modules.policy: REFUSE, TC - clear AD flag in answers
---

diff --git a/modules/policy/policy.lua b/modules/policy/policy.lua
index df52f33fb..daba24e89 100644
--- a/modules/policy/policy.lua
+++ b/modules/policy/policy.lua
@@ -493,6 +493,7 @@ end
 function policy.REFUSE(_, req)
 	local answer = req.answer
 	answer:rcode(kres.rcode.REFUSED)
+	answer:ad(false)
 	return kres.DONE
 end
 
@@ -500,6 +501,7 @@ function policy.TC(state, req)
 	local answer = req.answer
 	if answer.max_size ~= 65535 then
 		answer:tc(1) -- ^ Only UDP queries
+		answer:ad(false)
 		return kres.DONE
 	else
 		return state