From abfec582b0ab3740e70caa6ae478003f246ccc9e Mon Sep 17 00:00:00 2001
From: bert hubert <bert.hubert@netherlabs.nl>
Date: Tue, 19 Feb 2019 23:37:30 +0100
Subject: [PATCH] our ringbuffers got fed packetcached delegation responses as
 'queries for domains we were not auth for'. Fixed.

---
 pdns/responsestats-auth.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pdns/responsestats-auth.cc b/pdns/responsestats-auth.cc
index 2112dce2a6..6187180efe 100644
--- a/pdns/responsestats-auth.cc
+++ b/pdns/responsestats-auth.cc
@@ -25,7 +25,7 @@ void ResponseStats::submitResponse(DNSPacket &p, bool udpOrTCP) {
   if(p.d.aa) {
     if (p.d.rcode==RCode::NXDomain)
       S.ringAccount("nxdomain-queries",p.qdomain.toLogString()+"/"+p.qtype.getName());
-  } else if (p.isEmpty()) {
+  } else if (p.d.rcode == RCode::Refused) {
     S.ringAccount("unauth-queries",p.qdomain.toLogString()+"/"+p.qtype.getName());
     S.ringAccount("remotes-unauth",p.d_remote);
   }
-- 
2.47.2