diff --git a/DnsServerCore/Dns/DnsServer.cs b/DnsServerCore/Dns/DnsServer.cs
index fa0c4f6a..3182d53a 100644
--- a/DnsServerCore/Dns/DnsServer.cs
+++ b/DnsServerCore/Dns/DnsServer.cs
@@ -2431,7 +2431,7 @@ namespace DnsServerCore.Dns
             IReadOnlyList<DnsResourceRecord> additional = response.Additional;
 
             //answer section checks
-            if (!dnssecOk && (answer.Count > 0))
+            if (!dnssecOk && (answer.Count > 0) && (response.Question[0].Type != DnsResourceRecordType.ANY))
             {
                 //remove RRSIGs from answer
                 bool foundRRSIG = false;