respond REFUSED instead of NOERROR for "unknown zone" situations

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 651beb1384d7c697060a97c88798ad6fecd6eb9f..d0c6d45d40866911b629763f4bf2033c2ebbe466 100644 (file)
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1160,7 +1160,8 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
         addRootReferral(r);
       }
       else {
-        DLOG(L<<Logger::Warning<<"Setting 'No Error'"<<endl);
+        if (!retargetcount)
+          r->setRcode(RCode::Refused); // send REFUSED - but only on empty 'no idea'
       }
       goto sendit;
     }