Commit cc98f98f authored by Petr Špaček's avatar Petr Špaček

blacklist: ignore RRSIG queries as well

parent ceafb611
......@@ -31,8 +31,8 @@ def is_blacklisted(packet: bytes) -> bool:
if 'QR' in flags: # not a query
return True
dnspacket = dnsmsg.question[0]
# there is not standard describing common behavior for ANY query
if dnspacket.rdtype == dns.rdatatype.ANY:
# there is not standard describing common behavior for ANY/RRSIG query
if dnspacket.rdtype in {dns.rdatatype.ANY, dns.rdatatype.RRSIG}:
return True
return False
except Exception:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment