I have made the changes as requested and the new dnsdist.conf is as
follows;
setLocal('85.10.203.183')
setACL({'0.0.0.0/0', '::/0'}) -- Allow all IPs access
newServer({address='85.10.203.183:5300', pool='auth'})
newServer({address='85.10.203.183:5301', pool='recursor'})
recursive_ips = newNMG()
recursive_ips:addMask('0.0.0.0/0') -- These network masks are the ones
from allow-recursion in the Authoritative Server
addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))
addAction(AllRule(), PoolAction('auth'))
If I try to dig I am getting same results;
dig @85.10.203.183 gifsitebuilder.com A -p 5300
dig @85.10.203.183 gifsitebuilder.com A -p 5301
dig @85.10.203.183 gifsitebuilder.com A -p 53
; <<>> DiG 9.16.1-Ubuntu <<>> @85.10.203.183 gifsitebuilder.com A -p 53
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6497
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;gifsitebuilder.com. IN A
;; ANSWER SECTION:
gifsitebuilder.com. 0 IN A 95.216.38.152
;; Query time: 0 msec
;; SERVER: 85.10.203.183#53(85.10.203.183)
;; WHEN: Tue Jan 19 09:30:47 CET 2021
;; MSG SIZE rcvd: 63
On Tue, Jan 19, 2021 at 10:31 AM Jacob Bunk Nielsen via Pdns-users <
pdns-users@mailman.powerdns.com> wrote:
> Hi
>
> On 19/01/2021 07.41, Dedan Irungu via Pdns-users wrote:
> >
> > I have installed powerdns on the server to serve DNS requests.
> >
> > The setup has powerdns at port 5300, recursor at port 5301 and dnsdist
> > at port 53.
> >
> You never send any queries to you auth server.
> > setLocal('85.10.203.183')
> > setACL({'0.0.0.0/0 <http://0.0.0.0/0>', '::/0'}) -- Allow all IPs access
> >
> > newServer({address='85.10.203.183:5301 <http://85.10.203.183:5301>',
> > pool='auth'})
> > newServer({address='85.10.203.183:5301 <http://85.10.203.183:5301>',
> > pool='recursor'})
>
> You set up 2 pools. You probably want your auth pool to go to 5300?
>
> > recursive_ips = newNMG()
> > recursive_ips:addMask('0.0.0.0/0 <http://0.0.0.0/0>') -- These network
> > masks are the ones from allow-recursion in the Authoritative Server
> >
> > addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))
> > addAction(AllRule(), PoolAction('auth'))
>
> Then you say that everyone should talk to the recursive pool.
>
> Best regards,
>
> Jacob
>
> _______________________________________________
> Pdns-users mailing list
> Pdns-users@mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users
>
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
