From 2ded47fbede2f8a1b92cbefa70b10989cb71797f Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Fri, 15 Nov 2013 23:35:46 +0000
Subject: [PATCH] return NXDOMAIN for all unknown queries

---
 fe/dns.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/fe/dns.go b/fe/dns.go
index e52fa49c..77c3f2d5 100644
--- a/fe/dns.go
+++ b/fe/dns.go
@@ -177,6 +177,11 @@ func (d *DnsRedirector) serveDNS(w dns.ResponseWriter, req *dns.Msg) {
 			m.Answer = append(m.Answer, rec)
 		}
 		responseMsg = fmt.Sprintf("%v", ips)
+
+	default:
+		// Return an error for anything else.
+		m.SetRcode(req, dns.RcodeNameError)
+		responseMsg = "NXDOMAIN"
 	}
 
 	log.Printf("[%d] %s.%s %s (from %s) -> %s", req.MsgHdr.Id, query, d.origin, dns.TypeToString[req.Question[0].Qtype], w.RemoteAddr(), responseMsg)
-- 
GitLab