--- /dev/null
+From a220545c4277cba534be5ef4638b5076fc7d2cf4 Mon Sep 17 00:00:00 2001
+From: Simon Kelley <simon@thekelleys.org.uk>
+Date: Mon, 22 Oct 2018 18:21:48 +0100
+Subject: [PATCH 02/11] Ensure that AD bit is reset on answers from
+ --address=/<domain>/<address>.
+
+Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
+---
+ src/rfc1035.c | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+--- a/src/rfc1035.c
++++ b/src/rfc1035.c
+@@ -938,9 +938,9 @@ size_t setup_reply(struct dns_header *he
+ return 0;
+
+ /* clear authoritative and truncated flags, set QR flag */
+- header->hb3 = (header->hb3 & ~(HB3_AA | HB3_TC)) | HB3_QR;
+- /* set RA flag */
+- header->hb4 |= HB4_RA;
++ header->hb3 = (header->hb3 & ~(HB3_AA | HB3_TC )) | HB3_QR;
++ /* clear AD flag, set RA flag */
++ header->hb4 = (header->hb4 & ~HB4_AD) | HB4_RA;
+
+ header->nscount = htons(0);
+ header->arcount = htons(0);