From: Bert Hubert <bert.hubert@netherlabs.nl>
Date: Tue, 4 Jan 2011 22:00:55 +0000 (+0000)
Subject: don't synthesise an NSEC for NSEC3 zones when queried directly for NSEC
X-Git-Tag: auth-3.0~439
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=516f0576e3a256d08f35f438d9e1058b4e9fe735;p=pdns

don't synthesise an NSEC for NSEC3 zones when queried directly for NSEC


git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@1808 d19b8d6e-7fed-0310-83ef-9ca221ded41b
---

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index dcebf8461..00bcae353 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1199,7 +1199,7 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
     }
 
     // this TRUMPS a cname!
-    if(p->qtype.getCode() == QType::NSEC && p->d_dnssecOk) {
+    if(p->qtype.getCode() == QType::NSEC && p->d_dnssecOk && !d_dk.getNSEC3PARAM(sd.qname, 0)) {
       addNSEC(p, r, target, sd.qname, 2); // only NSEC please
       goto sendit;
     }