Commit cc98f98f authored by Petr Špaček's avatar Petr Špaček

blacklist: ignore RRSIG queries as well

parent ceafb611
...@@ -31,8 +31,8 @@ def is_blacklisted(packet: bytes) -> bool: ...@@ -31,8 +31,8 @@ def is_blacklisted(packet: bytes) -> bool:
if 'QR' in flags: # not a query if 'QR' in flags: # not a query
return True return True
dnspacket = dnsmsg.question[0] dnspacket = dnsmsg.question[0]
# there is not standard describing common behavior for ANY query # there is not standard describing common behavior for ANY/RRSIG query
if dnspacket.rdtype == dns.rdatatype.ANY: if dnspacket.rdtype in {dns.rdatatype.ANY, dns.rdatatype.RRSIG}:
return True return True
return False return False
except Exception: except Exception:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment