From ed5a90d3d3674948ec37feb8d34534bbb58b1c1f Mon Sep 17 00:00:00 2001
From: Peter van Dijk <peter.van.dijk@netherlabs.nl>
Date: Fri, 20 Feb 2015 10:18:47 +0100
Subject: [PATCH] respond REFUSED instead of NOERROR for "unknown zone"
 situations

---
 pdns/packethandler.cc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 651beb138..d0c6d45d4 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1160,7 +1160,8 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
         addRootReferral(r);
       }
       else {
-        DLOG(L<<Logger::Warning<<"Setting 'No Error'"<<endl);
+        if (!retargetcount)
+          r->setRcode(RCode::Refused); // send REFUSED - but only on empty 'no idea'
       }
       goto sendit;
     }
-- 
2.40.0