mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 18:28:25 +00:00
SERVFAIL is an expected error return, don't try all servers.
This commit is contained in:
@@ -751,7 +751,7 @@ void reply_query(int fd, int family, time_t now)
|
|||||||
|
|
||||||
if ((forward->sentto->flags & SERV_TYPE) == 0)
|
if ((forward->sentto->flags & SERV_TYPE) == 0)
|
||||||
{
|
{
|
||||||
if (RCODE(header) == SERVFAIL || RCODE(header) == REFUSED)
|
if (RCODE(header) == REFUSED)
|
||||||
server = NULL;
|
server = NULL;
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
@@ -774,8 +774,7 @@ void reply_query(int fd, int family, time_t now)
|
|||||||
we get a good reply from another server. Kill it when we've
|
we get a good reply from another server. Kill it when we've
|
||||||
had replies from all to avoid filling the forwarding table when
|
had replies from all to avoid filling the forwarding table when
|
||||||
everything is broken */
|
everything is broken */
|
||||||
if (forward->forwardall == 0 || --forward->forwardall == 1 ||
|
if (forward->forwardall == 0 || --forward->forwardall == 1 || RCODE(header) != SERVFAIL)
|
||||||
(RCODE(header) != REFUSED && RCODE(header) != SERVFAIL))
|
|
||||||
{
|
{
|
||||||
int check_rebind = 0, no_cache_dnssec = 0, cache_secure = 0;
|
int check_rebind = 0, no_cache_dnssec = 0, cache_secure = 0;
|
||||||
|
|
||||||
@@ -788,7 +787,7 @@ void reply_query(int fd, int family, time_t now)
|
|||||||
no_cache_dnssec = 1;
|
no_cache_dnssec = 1;
|
||||||
|
|
||||||
#ifdef HAVE_DNSSEC
|
#ifdef HAVE_DNSSEC
|
||||||
if (option_bool(OPT_DNSSEC_VALID) && !(forward->flags & FREC_CHECKING_DISABLED))
|
if (server && option_bool(OPT_DNSSEC_VALID) && !(forward->flags & FREC_CHECKING_DISABLED))
|
||||||
{
|
{
|
||||||
int status;
|
int status;
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user