Fix handling of dnssec-retry queries.

[DL6ER]

By submitting this pull request, I confirm the following:

• I have read and understood the contributors guide.
• I have checked that another pull request for this purpose does not exist.
• I have considered, and confirmed that this submission will be valuable to others.
• I accept that this submission may not be used, and the pull request closed at the will of the maintainer.
• I give this submission freely, and claim no ownership to its content.

How familiar are you with the codebase?:

10

The most recent FTL release contains dnsmasq v2.87rc1 which causes a regression for dnssec-retry queries leading to a bug where FTL isn't able to interpret the query type as DS/DNSKEY and incorrectly infers TYPE<upstream-port> as query type:

(picture taken from related Discourse topic)

Subsequently, FTL fails to analyze the content of this query (as it doesn't know how to handle, e.g. TYPE5335) and simply logs BLOB as return type (= some unknown binary stuff).

It is worth pointing out that DNS blocking and internal DNSSEC verification still works fine making this a displaying bug only.

[pralor-bot]

This pull request has been mentioned on Pi-hole Userspace. There might be relevant details there:

https://discourse.pi-hole.net/t/log-entry-for-dns-type-type5335-with-reply-of-blob/57908/21

[pralor-bot]

This pull request has been mentioned on Pi-hole Userspace. There might be relevant details there:

https://discourse.pi-hole.net/t/pi-hole-ftl-v5-18-1-web-v5-15-1-and-core-v5-12-2-released/58022/1