From dfd1b82cc9fc45c2a1729a848ac870e81eec2f07 Mon Sep 17 00:00:00 2001
From: Kees Monshouwer <mind04@monshouwer.org>
Date: Wed, 28 Aug 2013 22:38:20 +0200
Subject: [PATCH] send empty SERVFAIL on exeeded retargetcount and log failures

---
 pdns/packethandler.cc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 3ce671e93..674ac53c1 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1206,6 +1206,9 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
 
   retargeted:;
     if(retargetcount > 10) {    // XXX FIXME, retargetcount++?
+      L<<Logger::Warning<<"Abort CNAME chain resolution after "<<--retargetcount<<" redirects, sending out servfail. Initial query: '"<<p->qdomain<<"'"<<endl;
+      delete r;
+      r=p->replyPacket();
       r->setRcode(RCode::ServFail);
       return r;
     }
-- 
2.49.0