From: Kees Monshouwer <mind04@monshouwer.org>
Date: Fri, 28 Feb 2014 08:58:33 +0000 (+0100)
Subject: limit mode 0 closest provable encloser to optout
X-Git-Tag: auth-3.3.2~2^2~15
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=1ee7e22c8a9a77defd22734570e23e637cd5f6e2;p=pdns

limit mode 0 closest provable encloser to optout
---

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 39fe8d7a2..12760ec8b 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -607,7 +607,7 @@ void PacketHandler::addNSEC3(DNSPacket *p, DNSPacket *r, const string& target, c
 
     getNSEC3Hashes(narrow, sd.db, sd.domain_id,  hashed, false, unhashed, before, after, mode);
 
-    if ((mode == 0 ||  mode == 1) && (hashed != before)) {
+    if (((mode == 0 && ns3rc.d_flags) ||  mode == 1) && (hashed != before)) {
       DLOG(L<<"No matching NSEC3, do closest (provable) encloser"<<endl);
 
       bool doBreak = false;