X-Git-Url: https://git.distorted.org.uk/~mdw/adns/blobdiff_plain/a444333658b72c7d3aeecf7c755f6d6260ea1095..59fbb06aa915cb3e22889a458b2cfa914efaf796:/src/reply.c

diff --git a/src/reply.c b/src/reply.c
index 6198d07..9031476 100644
--- a/src/reply.c
+++ b/src/reply.c
@@ -157,7 +157,10 @@ void adns__procdgram(adns_state ads, const byte *dgram, int dglen,
     }
     if (rrtype == adns_r_cname && /* fixme - implement adns_qf_nocname */
 	(qu->typei->type & adns__rrt_typemask) != adns_r_cname) {
-      if (!qu->cname_dgram) { /* Ignore second and subsequent CNAMEs */
+      if (qu->flags & adns_qf_cname_forbid) {
+	adns__query_fail(qu,adns_s_prohibitedcname);
+	return;
+      } else if (!qu->cname_dgram) { /* Ignore second and subsequent CNAMEs */
 	qu->cname_begin= rdstart;
 	qu->cname_dglen= dglen;
 	st= adns__parse_domain(ads,serv,qu, &qu->vb,