From f7cbaf52c805ad62cc2af2013ed198adc1d666bc Mon Sep 17 00:00:00 2001
From: liuxueli <liuxueli@iie.ac.cn>
Date: Wed, 16 Feb 2022 18:12:22 +0800
Subject: [PATCH] =?UTF-8?q?TSG-9596:=20=E6=89=A7=E8=A1=8CDeny=20Action?=
 =?UTF-8?q?=E6=97=B6=E6=9C=AA=E6=89=A7=E8=A1=8CDROP=E7=9A=84=E5=8A=A8?=
 =?UTF-8?q?=E4=BD=9C=E5=AF=BC=E8=87=B4=E6=9C=AA=E9=98=BB=E6=96=AD=E6=88=90?=
 =?UTF-8?q?=E5=8A=9F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/tsg_action.cpp | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/tsg_action.cpp b/src/tsg_action.cpp
index d5017fc..1a3ff3d 100644
--- a/src/tsg_action.cpp
+++ b/src/tsg_action.cpp
@@ -848,7 +848,12 @@ static unsigned char tsg_do_deny_action(const struct streaminfo *a_stream, struc
 				break;
 			}
 			
-			local_state=0;
+			local_state=do_action_drop(a_stream, p_result, user_region, protocol, user_data);
+			if(protocol==PROTO_DNS && type==ACTION_RETURN_TYPE_APP)
+			{
+				local_state=set_drop_stream(a_stream, protocol);
+			}
+			
 			if(user_region->deny->app_para.send_icmp_enable==1)
 			{
 				 local_state|=send_icmp_unreachable(a_stream);