Refuse queries for RRSIG

git-svn-id: svn://bind10.isc.org/svn/bind10/trunk@1289 e5f2f494-b856-4b98-b285-d166d9295462

src/lib/auth/data_source.cc

@@ -482,6 +482,12 @@ DataSrc::doQuery(Query& q)
         QueryTaskPtr task = q.tasks().front();
         q.tasks().pop();
 
+        // Can't query directly for RRSIG.
+        if (task->qtype == RRType::RRSIG()) {
+            m.setRcode(Rcode::REFUSED());
+            return;
+        }
+
         // These task types should never be on the task queue.
         if (task->op == QueryTask::SIMPLE_QUERY ||
             task->op == QueryTask::REF_QUERY) {