From bcc65358a29ea9ec1c338931ece191472c19fc87 Mon Sep 17 00:00:00 2001
From: Bert Hubert <bert.hubert@netherlabs.nl>
Date: Sat, 2 Apr 2011 07:32:27 +0000
Subject: [PATCH] fix Frank Altpeter's discovery that delegations don't work
 well in non-DNSSEC mode. See this as an incentive to run in DNSSEC mode ;)

git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@2114 d19b8d6e-7fed-0310-83ef-9ca221ded41b
---
 pdns/packethandler.cc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 59e96f4da..472c97c5c 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1274,7 +1274,7 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
     while(B.get(rr)) {
       if((p->qtype.getCode() == QType::ANY || rr.qtype == p->qtype) && rr.auth) 
         weDone=1;
-      if((rr.qtype == p->qtype || rr.qtype.getCode() == QType::NS) && !rr.auth) 
+      if((rr.qtype == p->qtype && !rr.auth) || rr.qtype.getCode() == QType::NS) 
         weHaveUnauth=1;
 
       if(rr.qtype.getCode() == QType::CNAME && p->qtype.getCode() != QType::CNAME) 
@@ -1286,7 +1286,7 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
 
     if(rrset.empty()) {
       // try wildcards, and if they don't work, go look for NS records
-      cerr<<"Found nothing in the ANY, but let's try wildcards.."<<endl;
+      DLOG(L<<Logger::Warning<<"Found nothing in the ANY, but let's try wildcards.."<<endl);
       bool wereRetargeted(false), nodata(false);
       if(tryWildcard(p, r, sd, target, wereRetargeted, nodata)) {
         if(wereRetargeted) {
-- 
2.49.0