From: Štěpán Balážik <stepan.balazik@nic.cz>
Date: Wed, 20 Jan 2021 11:34:56 +0000 (+0100)
Subject: remove out-of-bailiwick update cut workaround
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=refs%2Fheads%2Fremove-out-of-bailiwick-workaround;p=thirdparty%2Fknot-resolver.git

remove out-of-bailiwick update cut workaround
---

diff --git a/lib/layer/iterate.c b/lib/layer/iterate.c
index 94342cfb5..76623c0e0 100644
--- a/lib/layer/iterate.c
+++ b/lib/layer/iterate.c
@@ -261,16 +261,7 @@ static int update_cut(knot_pkt_t *pkt, const knot_rrset_t *rr,
 	if (!ok) {
 		VERBOSE_MSG("<= authority: ns outside bailiwick\n");
 		qry->server_selection.error(qry, req->upstream.transport, KR_SELECTION_LAME_DELEGATION);
-#ifdef STRICT_MODE
 		return KR_STATE_FAIL;
-#else
-		/* Workaround: ignore out-of-bailiwick NSs for authoritative answers,
-		 * but fail for referrals. This is important to detect lame answers. */
-		if (knot_pkt_section(pkt, KNOT_ANSWER)->count == 0) {
-			state = KR_STATE_FAIL;
-		}
-		return state;
-#endif
 	}
 
 	/* Update zone cut name */