From da58455508805bb33687f92a2ee7453defc0e0b7 Mon Sep 17 00:00:00 2001
From: Simon Kelley <simon@thekelleys.org.uk>
Date: Mon, 13 Jan 2025 11:03:30 +0000
Subject: [PATCH] Tweak 7d915a0bb94260073ec7aa4dd00b787f3ea4b9e8

A downstream query may have gone to TCP, not just DNSSEC queries.
---
 src/forward.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/forward.c b/src/forward.c
index 7e13918..d341225 100644
--- a/src/forward.c
+++ b/src/forward.c
@@ -374,12 +374,12 @@ static void forward_query(int udpfd, union mysockaddr *udpaddr,
       while (forward->blocking_query)
 	forward = forward->blocking_query;
 
+      /* Don't retry if we've already sent it via TCP. */
+      if (forward->flags & FREC_GONE_TO_TCP)
+	return;
+      
       if (forward->flags & (FREC_DNSKEY_QUERY | FREC_DS_QUERY))
 	{
-	  /* Don't retry if we've already sent it via TCP. */
-	  if (forward->flags & FREC_GONE_TO_TCP)
-	    return;
-
 	  /* log_id should match previous DNSSEC query. */
 	  daemon->log_display_id = forward->frec_src.log_id;