From 13129872eb0b3c9d63782f42d7f1752e5dabefcf Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Wed, 4 May 2022 14:45:19 +1000
Subject: [PATCH] Process the delegating NS RRset when checking rpz rules

(cherry picked from commit cf97c61f48f6cea6d9e67158485106f659433309)
Conflict: NA
Reference: https://gitlab.isc.org/isc-projects/bind9/-/commit/13129872eb0b3c9d63782f42d7f1752e5dabefcf
---
 lib/ns/query.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/ns/query.c b/lib/ns/query.c
index 771aa7b970..4eb95b808d 100644
--- a/lib/ns/query.c
+++ b/lib/ns/query.c
@@ -4211,6 +4211,7 @@ rpz_rewrite(ns_client_t *client, dns_rdatatype_t qtype, isc_result_t qresult,
 			}
 			switch (result) {
 			case ISC_R_SUCCESS:
+			case DNS_R_GLUE:
 				result = dns_rdataset_first(st->r.ns_rdataset);
 				if (result != ISC_R_SUCCESS) {
 					goto cleanup;
-- 
2.23.0