Process the delegating NS RRset when checking rpz rules

(cherry picked from commit cf97c61f48f6cea6d9e67158485106f659433309)

diff --git a/lib/ns/query.c b/lib/ns/query.c
index 771aa7b970804101e75a4a6756d64aecf562e0fc..4eb95b808d715f94513ea11fe03634bc492a9c33 100644 (file)
--- a/lib/ns/query.c
+++ b/lib/ns/query.c
@@ -4211,6 +4211,7 @@ rpz_rewrite(ns_client_t *client, dns_rdatatype_t qtype, isc_result_t qresult,
                        }
                        switch (result) {
                        case ISC_R_SUCCESS:
+                       case DNS_R_GLUE:
                                result = dns_rdataset_first(st->r.ns_rdataset);
                                if (result != ISC_R_SUCCESS) {
                                        goto cleanup;