diff --git a/lib/ns/query.c b/lib/ns/query.c
index 17effd7aff..666675290d 100644
--- a/lib/ns/query.c
+++ b/lib/ns/query.c
@@ -3954,6 +3954,7 @@ rpz_rewrite(ns_client_t *client, dns_rdatatype_t qtype,
 	case DNS_R_EMPTYWILD:
 	case DNS_R_NCACHENXDOMAIN:
 	case DNS_R_NCACHENXRRSET:
+	case DNS_R_COVERINGNSEC:
 	case DNS_R_CNAME:
 	case DNS_R_DNAME:
 		qresult_type = qresult_type_restart;