On Fri, Oct 17, 2014 at 01:18:36AM -0300, Ciro Iriarte wrote:
> Hi!, I've seen the published LUA scripts examples and seems pretty
> simple to redirect certain domains (one?) just modifying examples
> available, but what about have a list of hundreds or thousands of
> sites to blacklist?.
>
> I wo
> > Hi Ciro,
> >
> > We used a CDB key value store. It was easy to use/update and had
> > very good performance. "grepping" is O(n*n) so it will tank as
> > your list grows and you really don't want to slow down your DNS
> > lookups.
> >
> > Regards,
> > Ken
>
> Hi Ken, I'll look at the LUA+CDB mi
On Mon, Oct 20, 2014 at 02:09:05PM -0300, Ciro Iriarte wrote:
> 2014-10-20 13:29 GMT-03:00 Robert Mortimer :
> > Hi,
> >
> > Just to add a bit less light, we implemented this sort of thing about 5
> > years back
> > and now with the aid of a small script have a solution which is fully RPZ
> > comp
On Mon, Oct 27, 2014 at 07:27:15PM +0200, Aki Tuomi wrote:
> On Mon, Oct 27, 2014 at 01:56:17PM -0300, Ciro Iriarte wrote:
> > 2014-10-27 3:46 GMT-03:00 Aki Tuomi :
> > >
> > > In a way i'd chosen sqlite3 instead as it is pretty much on par with cdb.
> > > But, to make it work properly, i'd just ad
On Tue, Dec 02, 2014 at 07:25:55AM +, Phil Daws wrote:
> Good morning, all
>
> Have you recently started to use PDNS and very impressed indeed. Am
> wondering if any of you have an example LUA script for checking whether a
> remote service is available or not ie. is webserver A available if
Have you tried the latest release 3.4.1? It does have some bug
fixes.
Regards,
Ken
On Wed, Dec 03, 2014 at 11:49:33AM -0500, Craig Despeaux wrote:
> ...
>
> I'm at my wit's end as to how to resolve this problem. Any suggestions as
> to things I can look at? Like I said, it works flawlessly with
On Tue, Jan 27, 2015 at 11:22:28AM +0100, sth...@nethelp.no wrote:
> > I have pdns-recursor and pdns on the same host and port but on
> > different IP$,1rys. When I query pdns and it can not answer, so it passes
> > the query on to pdns-recursor, which then responds with the answer but then
Hi Steven,
Review the schema and if the tables do not exist create them as
specified. The alter's should be run against existing tables.
Regards,
Ken
On Tue, Feb 17, 2015 at 03:59:46PM -0600, Steven Spencer wrote:
> List,
>
> I need to preface this that we are not using DNSSEC.
>
> In doing th
On Wed, Feb 18, 2015 at 08:40:47AM -0600, Steven Spencer wrote:
> That makes perfect sense, but since I do not have DNSSEC enabled,
> none of the tables or columns specific to that are in the schema.
> The very first set from my original email shows the ALTER TABLE
> tsigkeys line, and that table a
On Thu, Feb 19, 2015 at 03:34:06PM -0600, Nick Williams wrote:
> I'm a bit curious because, looking through the code history, I can't find any
> evidence of it.
>
> The schema for PDNS 3.0 shows no "ordername" column or "orderindex" index on
> the records table:
>
> https://github.com/PowerDNS/
On Tue, Apr 28, 2015 at 06:22:02PM +0300, Kiki wrote:
> Hi all,
>
> I want to setup a NS to "shadow" a zone on an internal LAN. Basically to
> add private records for the machines on the LAN to an otherwise public zone.
>
> According to https://doc.powerdns.com/md/authoritative/recursion/ even if
On Wed, Apr 29, 2015 at 11:26:41AM +0300, Kiki wrote:
> Thanks for the info. I'm stull confused about the meaning of "for questions
> for which there is no answer", in the following paragraph:
>
> This means that for questions for which there is no answer, PowerDNS will
> consult the recursor for
On Wed, Apr 29, 2015 at 03:33:50PM +0200, Peter Thomassen wrote:
> Hi Ken,
>
> So, what would be an example of a situation where "PowerDNS will
> consult the recursor for an recursive query, even if PowerDNS is
> authoritative for a domain"?
>
> Apparently such cases exists, otherwise this senten
On Wed, Apr 29, 2015 at 05:19:22PM +0200, Peter van Dijk wrote:
> Hello,
>
> On 29 Apr 2015, at 15:40, k...@rice.edu wrote:
>
> >>Apparently such cases exists, otherwise this sentence would not be in
> >>the documentation.
> >>https://doc.powerdns.com/md/a
On Mon, Jun 08, 2015 at 02:51:13PM -0700, Mark Moseley wrote:
> I'm curious if there's a setting to tell powerdns not to be helpful and
> return the dereferenced CNAME.
>
> That is, if I look up a given record and it's a CNAME that then points to
> an A record, don't try to then *also* return a lo
On Thu, Oct 01, 2015 at 08:40:03AM -0400, Larry Smith wrote:
> I should also note...All static entries other than AD related (SRV) work
> and all DHCP (ISC-DHCP) DDNS related entries are created and work; other
> than AD DDNS related entries which should be created automatically within
> each zone.
On Wed, Nov 11, 2015 at 04:15:18PM +0400, Nadir M. Aliyev wrote:
> Dear All Thanks for your reply!
>
> I understand keeping authoritative and recursive services separated is
> strongly recommended. Ok.
>
> I understand that I must set for my customers (approx. 200k) powerdns
> recursive service
On Thu, Feb 25, 2016 at 12:01:19PM +0100, Thomas Mieslinger wrote:
> Hi,
>
> today I wanted to migrate my ddns master from bind to pdns. 3 DHCP
> Servers sent a about 50 updates per second to the pdns 3.4.8 and
> only one or two updates per second could be successfully commited to
> the database.
On Wed, Mar 23, 2016 at 05:44:56AM -0700, syaginf wrote:
> Greetings.
> We are in the process of migrating from Bind to Powerdns on one of our
> compute cluster.
> Issue we are having is related to DNS Delegation for Isilon (Related to
> Isilon Smart Connect feature.)
>
> Server is Master for .hpc
On Wed, Mar 23, 2016 at 06:12:53AM -0700, syaginf wrote:
> I have pdns-recursor configured.
> It works for outside addresses , but I can't seem to make it respond for
> this type of requests.
>
> Indeed what happens on bind side is isilon would return one of the addresses
> from dynamic pool.
> So
On Wed, Mar 23, 2016 at 06:30:47AM -0700, syaginf wrote:
> This is the part I don't understand I guess.
> what would be the forward zone that I am serving?
> if it's not isilon.hpc and not isilon-dns.hpc? What exactly am I serving and
> how do I put it in?
> forward-zone=???=???
>
> Because what i
On Wed, Mar 23, 2016 at 07:50:37AM -0700, syaginf wrote:
> I have tried following options as this point
> forward-zones=isilon.hpc=192.168.3.0
> forward-zones=+isilon.hpc=192.168.3.0
> forward-zones-recurse=192.168.3.0
>
> None of them provide me with result that I need.
> I still don't get A rec
On Wed, Mar 23, 2016 at 08:03:04AM -0700, syaginf wrote:
> What is interesting with
> forward-zones=isilon.hpc=192.168.3.0 set
> if I do dig and point to recursor dns and port - I get the A record I need.
> But when I ask PDNS server i don't get A record.
> So it seems like I need to do something
On Thu, May 12, 2011 at 03:37:24AM -0400, Charles Sprickman wrote:
> Hello,
>
> We've been using the PDNS recursor for some time now and have been quite
> happy with it. It replaced dnscache and has proven to perform much better.
>
> We're now looking at moving away from tinydns, mainly to get I
On Thu, Apr 21, 2011 at 10:52:42PM +0200, bert hubert wrote:
> On Thu, Apr 21, 2011 at 03:33:31PM -0500, Kenneth Marshall wrote:
> > I am sorry, but I think this has been a wild goose chase regarding a
> > bug in the recursor. The existing 3.3 version works just fine with
> > resolving cdn4.digital
On Sat, Jun 11, 2011 at 07:08:54PM +0200, Marten Lehmann wrote:
> Hi,
>
> I'm about to migrate from BIND named caching daemon to
> pdns-recursor, but I cannot find an equivalent for BINDs
> max-cache-ttl option.
>
> While max-negative-ttl in pdns is the same as max-ncache-ttl in
> BIND, I cannot
On Thu, Sep 29, 2011 at 07:38:49PM +0100, AJ McKee wrote:
> +1 for DNAME support but I like the pipe backend idea. Still would be
> cute to have it built into pdns. I am seeing a lot of scenarios where
> this may be useful now.
>
> AJ
I do not know how useful DNAME support is given the dearth of
Hi PDNS user community.
I am having a problem compiling PDNS 3.0 on RHEL 6. It cannot locate
some system libraries and I was wondering about the best way to correct
the problem. It looks like libssl.so.1.0.0 is located in /usr/lib64:
$ ls -l /usr/lib64/libssl.*
lrwxrwxrwx. 1 root root 15 Jun
UNLOGGED tables.
Regards,
Ken
> -Original Message-
> From: pdns-users-boun...@mailman.powerdns.com
> [mailto:pdns-users-boun...@mailman.powerdns.com] On Behalf Of k...@rice.edu
> Sent: 17 October 2011 22:00
> To: pdns-users@mailman.powerdns.com
> Subject: [Pdns-users] Pr
On Fri, Mar 16, 2012 at 02:31:34PM +0100, Remi Gacogne wrote:
>
> Hi,
>
> I noticed a difference in the behavior of bind, powerdns (using bind
> or MySQL backend) and nsd regarding the answer to an NS query
> for a delegated zone. Powerdns is responding to the query by putting
> corresponding NS
Hi PDNS community,
I am investigating a CNAME resolution problem using
PDNS Recursor 3.3.1. Here is the lookup that fails:
> nslookup blog.mythandsymbol.com
Server: 127.0.0.1
Address:127.0.0.1#53
** server can't find blog.mythandsymbol.com: NXDOMAIN
Is is actually a CNAME:
> ns
On Wed, Mar 21, 2012 at 01:55:06AM +0400, Mikhail Nasonov wrote:
> Hello!
>
> Please tell, is it possible to determine the IP address source from which
> request was initialized? PipeBackend have the option "remote-ip-address", but
> it shows the IP address of the final request (usually this is
;; Query time: 9 msec
;; SERVER: 128.42.209.32#53(128.42.209.32)
;; WHEN: Wed Mar 21 08:23:50 2012
;; MSG SIZE rcvd: 52
Why doesn't the recursor restart with the CNAME results?
Regards,
Ken
On Wed, Mar 21, 2012 at 11:22:17AM +0100, Peter van Dijk wrote:
> Hello Ken,
>
> On Mar 20
On Wed, Mar 21, 2012 at 02:27:19PM +0100, Peter van Dijk wrote:
> Hello Ken,
>
> On Mar 21, 2012, at 14:24 , k...@rice.edu wrote:
>
> > I guess I just do not understand. I added a similar CNAME record
> > in our domain pointing to the same name domains.tumblr.com and
&g
On Wed, Mar 21, 2012 at 02:31:41PM +0100, Peter van Dijk wrote:
> Hello Ken,
>
> On Mar 21, 2012, at 14:29 , k...@rice.edu wrote:
>
> > I see that it returns NOERROR, which is good. Now I do not understand why
> > the
> > recursor does not recurse and return the
On Sat, May 05, 2012 at 09:00:00AM +0200, Thomas Faddegon wrote:
> Hi PDNS community,
>
> I want implement empty CNAME records instead of empty A records in our DNS
> environment. But when I implement the empty records my MX records won't
> work anymore.
>
> Example:
>
> *nslookup
> > set type=m
On Tue, May 15, 2012 at 11:01:30AM +0200, Yousri GRANIER wrote:
> Hi,
>
> I have been encoutering a trouble with pdns-recusor with some domain
>
> here they are :
>
> doth.fr
> tddatech.fr
>
> Both of the using the same NS/SOA.
>
> I a m using this debian 6 release :
> Linux ns-cache-1 2.6.32-
On Tue, May 22, 2012 at 10:59:22AM +0200, Emiel van Berlo wrote:
> o.k. then why doesn't the slaved NS and MX records have this trailing
> dot in the powerdns database?
>
The server adds them. You do not need to add a dot "." to every record
in a database, if the software can do it. It matches a
On Tue, May 22, 2012 at 03:19:13PM +0200, Emiel van Berlo wrote:
> The manual warns about possible strange behaviour with this trailing
> dot business.
> When I do a dig to my dns servers everything seems o.k.
> But will it be o.k. in six months?
>
> When I setup a master or native domain we don't
On Tue, Jul 10, 2012 at 02:00:45PM -0700, Andrew Melton wrote:
> I am wondering whether it is possible to configure the gmysql backend to
> pull from more than one table. Currently, we use `pdns`.`records`, but it
> is growing large and I would like to split the data. Any suggestions would
> be a
On Thu, Jul 12, 2012 at 09:55:18AM -0400, Yingdi Yu wrote:
> Hi all,
>
> I know PowerDNS authoritative server has been supporting DNSSEC for a
> while, but does PowerDNS recursive server support DNSSEC now? Thanks!
>
> Regards,
>
> Yingdi
No.
Cheers,
Ken
___
Hi PDNS community,
Running pdns-recursor 3.3.1 behind pdns-2.9.22 I am having
a problem resolving the following host:
wwwa.nko.navy.mil
Here is a dig against one of the servers:
$ dig wwwa.nko.navy.mil @ns1.rice.edu
; <<>> DiG 9.7.3-P3-RedHat-9.7.3-8.P3.el6_2.3 <<>> wwwa.nko.navy.mil
@ns1.ric
Dear PDNS community,
Just to follow up. I went ahead and opened ticket #598 against
pdns-recursor-3.3.1 for this matter.
Regards,
Ken
On Thu, Oct 11, 2012 at 08:22:47AM -0500, k...@rice.edu wrote:
> Hi PDNS community,
>
> Running pdns-recursor 3.3.1 behind pdns-2.9.22 I am having
&g
On Tue, Oct 30, 2012 at 06:48:03PM +0100, Posner, Sebastian wrote:
> a b wrote:
>
> > Nevertheless, in my experience, this should be handled by the pdns
> > software.
> > I'm thinking that if pdns supermaster is capable of "persuading" a
> > superslave
> > to become a slave for a domain, and th
On Mon, Nov 12, 2012 at 06:05:28PM +0100, Stefan Schmidt wrote:
> On Mon, Nov 12, 2012 at 10:48 AM, Đức Vinh Hồ wrote:
>
> > Hi all,
> >
>
> Hi there,
>
>
> > My website is using PDNS round robin with too many servers pointed to 1
> > domain name. I mean:
> >
> > Name
On Tue, Dec 11, 2012 at 05:25:55PM +0100, Mario Caruso wrote:
> Hello everybody,
Lots of details deleted...
> I'm really puzzled by the situation, is there anybody that is having
> the same behaviour ? or that is aware of this weird thing with
> cloudfront ?
>
Hi Mario,
I reported this bug
On Tue, Dec 11, 2012 at 06:09:56PM +0100, Mario Caruso wrote:
> Il Tue, 11 Dec 2012 10:33:56 -0600
> "k...@rice.edu" ha scritto:
>
> > On Tue, Dec 11, 2012 at 05:25:55PM +0100, Mario Caruso wrote:
> > > Hello everybody,
> >
> > Lots of details d
On Thu, Jan 31, 2013 at 08:20:24PM +0100, Jan-Piet Mens wrote:
> > On long, solitary drives I get crazy ideas, and at a beastly hour this
> > morning, it happened again:
>
> FWIW, I'm taking this to [1], where I'm showing some examples of what is
> possible, even though this is probably less than
On Fri, Jul 12, 2013 at 10:57:35AM +1000, Luca Salvatore wrote:
> Hi,
>
> We use JPower Admin to add records into our PDNS box. I'm trying to add some
> SRV records but not sure how to format the entries e.g. the priority, weight,
> port and target that a SRV record needs.
> Can't find much inf
On Fri, Jul 12, 2013 at 01:47:40PM +1000, Luca Salvatore wrote:
> Erm.. struggling to understand that description.
> I need to add this:
>
> Name _sipfedls._tcp
> Ttl 3600
> Priority 5
> Weight 0
> Port
> Target sip.me.com
>
>
> How can i format that for PDNS or Jpower Admin?
>
> Luca Salv
Dear PDNS community,
We are preparing to upgrade to the DNSSEC capable pdns 3.3. Please find
the attached patch to include a "finalize-axfr-query" to replace the
blanket assumption of "commit". This allows you to utilize areas other
than your primary records tables to manage the API mismatch betwe
Argh! I forgot to include one patch in the posted patchset.
Here it is:
-
--- pdns-3.3/pdns/dnsbackend.hh 2013-05-16 07:55:13.0 -0500
+++ pdns-3.3-FINALIZEAXFR/pdns/dnsbackend.hh2013-07-11 20:05:43.697847786
-0500
@@ -181,7 +181,7 @@
}
//! commits the t
Dear PDNS community,
I am looking into a problem with recursion with pdns-3.3 and
pdns-recursor-3.5.2. Our current system is pdns-2.9.22 and
pdns-recursor-3.3.1. The problem is looking up the IP address
based on a CNAME. Here are the dig results for the old and
new systems:
$ dig imap.mail.rice.e
On Thu, Oct 31, 2013 at 06:34:38PM +, Norman wrote:
> Hi List,
>
> I have zones that get transferred from a bind server to a Powerdns
> Mysql back-end on a second server. All records transfer just
> fine...except for the Autodiscover SRV record. The record itself
> registers correctly:
> _auto
On Wed, Dec 04, 2013 at 01:18:40PM -0600, Drew Decker wrote:
> We are currently wanting to implement Isilon's SmartConnect features, which
> requres a delegation (NS) record to the Isilon. Unfortunately, their
> documentation only covers BIND and Microsoft DNS products. Is there a way
> to do the
On Wed, Dec 04, 2013 at 02:03:57PM -0600, Drew Decker wrote:
> Ken,
>
> Yea - I don't think this will work for us. Our domain is shared with the
> Isilon, so it would be lab.domain.com, and I don't want to forward the
> entire zone over to the Isilon.
>
> thanks!
>
Yes, we put our Isilon in it
that the
Isilon "required" its own domain to work.
Regards,
Ken
>
> On Wed, Dec 4, 2013 at 2:06 PM, k...@rice.edu wrote:
>
> > On Wed, Dec 04, 2013 at 02:03:57PM -0600, Drew Decker wrote:
> > > Ken,
> > >
> > > Yea - I don't think this will w
Hi,
I am working on porting your auto-signing schema proof-of-concept for Oracle:
http://wiki.powerdns.com/trac/browser/trunk/pdns/modules/oraclebackend/schema.sql
to PostgreSQL. I have found something that looks like a bug in the following
function dnsname_to_raw():
---
On Thu, Jan 09, 2014 at 10:26:07AM -0600, k...@rice.edu wrote:
> Hi,
>
> I am working on porting your auto-signing schema proof-of-concept for Oracle:
>
> http://wiki.powerdns.com/trac/browser/trunk/pdns/modules/oraclebackend/schema.sql
>
> to PostgreSQL. I have found some
On Fri, Jan 10, 2014 at 11:42:18AM +0100, Peter van Dijk wrote:
> Hello Ken,
>
> replying to both messages in-line.
>
> On 09 Jan 2014, at 23:47 , k...@rice.edu wrote:
>
> > On Thu, Jan 09, 2014 at 10:26:07AM -0600, k...@rice.edu wrote:
> >> WHILE lpos <
On Fri, Jan 10, 2014 at 11:46:43AM +0100, Peter van Dijk wrote:
> Hello Ken,
>
> >> Okay, using the assumption that the code has a bug, here is the PostgreSQL
> >> version:
>
> As a followup: Kees Monshouwer has set up a Jenkins job for Oracle testing
> recently. All tests pass, suggesting the O
On Mon, Feb 24, 2014 at 10:52:36PM +0100, Marco de Booij wrote:
> op 24-02-14 22:00, Gavin Henry schreef:
> >>I run a Debian Wheezy server and I just installed powerdns and the LDAP
> >>backend. The openLDAP I run uses the internal configuration and for that I
> >>need to insert the schema from a
Hi PDNS community,
I have a quick question about the impact of lua scripts on the recursors
performance. If occasionally a script needs to perform more processing for
a particular request, does that lookup/lua processing block or slow up
other queries in progress or new lookups?
Regards,
Ken
___
On Thu, Mar 27, 2014 at 09:10:19AM +0200, Margus Kiting wrote:
> Hi!
>
> I noticed in oracle backed schema SQL, there isn't any master nameserver
> column available in Zones table. I can specify zone type, but not master
> name server if type is set to slave.
> I also tried looking in source code,
On Thu, Mar 27, 2014 at 02:06:01PM +0100, Matthias Leopold wrote:
> hi,
>
> i have "a fairly standard" setup of a 3.3.1 powerdns server with
> mysql backend on a centos 6 system. the server is acting as an
> authoritative dns server and doing recursion for selected ip ranges.
>
> the problem aris
Dear PDNS community,
While debugging a new installation we noticed that a slow zone transfer
using a PostgreSQL backend would insert duplicate records if the transfer
took over 1 minute and a second transfer was started before the first
one completed. The problem is that the default isolation leve
On Fri, Mar 28, 2014 at 08:29:03AM -0500, k...@rice.edu wrote:
> Dear PDNS community,
>
> While debugging a new installation we noticed that a slow zone transfer
> using a PostgreSQL backend would insert duplicate records if the transfer
> took over 1 minute and a second trans
On Fri, Mar 28, 2014 at 09:41:50AM -0400, Stephen Frost wrote:
> Ken,
>
> * k...@rice.edu (k...@rice.edu) wrote:
> > While debugging a new installation we noticed that a slow zone transfer
> > using a PostgreSQL backend would insert duplicate records if the transfer
> &g
On Thu, Jun 26, 2014 at 10:21:06PM +0100, Jorge Bastos wrote:
> > It takes very little time for powerdns to pick up the changes. Adding
> > records is backend specific, but assuming you are using mysql backend
> > (gmysql), you can use the schema at
> >
> > http://doc.powerdns.com/html/generic-myp
On Thu, Jul 03, 2014 at 02:01:49PM +0200, Klaus Darilion wrote:
> Another workaround (untested) would be to put an explicit lock at the
> beginning of the "delete-zone-query":
> delete-zone-query="LOCK;delete from records where domain_id=%d"
>
> But (if it is allowed to have multiple statements in
On Thu, Jul 03, 2014 at 04:04:43PM +0200, Klaus Darilion wrote:
> > Hi Klaus,
> >
> > We have observed the same behavior here. When it takes longer to perform
> > a zone transfer than the periodic check interval (60s), a second will be
> > initiated with the results that you have reported. We curr
On Thu, Jul 03, 2014 at 05:30:52PM +0200, Klaus Darilion wrote:
> > Hi Klaus,
> >
> > We use gpgsql as well. We only have problems on the initial transfer of
> > the zone because there are no existing records in the domain. Then if
> > multiple AXFRs are started, records can be duplicated. Once th
On Wed, Jul 30, 2014 at 12:15:33PM +0100, Stephen Dodge wrote:
> Hello,
>
> I am using PDNS 3.3.1 with mysql backend and I am trying to configure URL
> redirect.
>
> in my pdns.conf I have configured:
>
> fancy-records=yes
> urlredirector=1.1.1.1
>
> I have a record configured configured:
>
>
73 matches
Mail list logo
