From f92ac4ebd8730504a3784a00838a2c6bd608fb7d Mon Sep 17 00:00:00 2001
From: Pierre-Olivier Mercier <nemunaire@nemunai.re>
Date: Thu, 30 Apr 2026 09:24:09 +0700
Subject: [PATCH] Don't classify unreachable servers as denial scheme NONE

---
 checker/collect.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/checker/collect.go b/checker/collect.go
index 486e7fd..aff9679 100644
--- a/checker/collect.go
+++ b/checker/collect.go
@@ -131,7 +131,7 @@ func collectFromServer(ctx context.Context, server, zone string) PerServerView {
 	view.ProbeName = strings.TrimSuffix(probe, ".")
 	if probeResp := authQuery(ctx, server, probe, dns.TypeA, &view, true); probeResp != nil {
 		view.DenialKind, view.DenialRecords = classifyDenial(probeResp, view.NSEC3PARAM)
-	} else if len(view.DNSKEYs) == 0 {
+	} else if view.UDPError == "" && view.TCPError == "" && len(view.DNSKEYs) == 0 {
 		view.DenialKind = DenialNone
 	}