Re: [Pdns-users] Use recursor to block phishing

2008-07-29 Thread sysadmin
> Please show your entire recursor configuration - I wonder if your file is > actually being loaded! Follow the recursor.conf: # Drop uid setuid=nobody # Drop gid setgid=nobody # Don't log queries quiet=on # Local IP address to bind to local-address=10.1.1.140 # Local port to bind to local-p

Re: [Pdns-users] Re: Can pdns-recursor forward . ? / Re: Where can I download Windows binaries?

2008-07-29 Thread bert hubert
On Wed, Jul 30, 2008 at 12:00:51AM +0200, Leen Besselink wrote: > > I guess it depends how the UDP forwarder is implemented - there is no reason > > why the forwarder wouldn't be able to use similarly randomised source ports > > (but you would lose caching, of course) > I agree, but I've never seen

[Pdns-users] Re: Can pdns-recursor forward . ? / Re: Where can I download Windows binaries?

2008-07-29 Thread Leen Besselink
On Tue, Jul 29, 2008 at 11:25:58PM +0200, Christof Meerwald wrote: > On Tue, 29 Jul 2008 23:13:07 +0200, Leen Besselink wrote: > >> Wouldn't simple UDP forwarding be sufficient in this case? (but you would > >> still need to find a program to do the UDP forwarding) > > Yes, I guess that is possible

Re: [Pdns-users] ZoneTransfers

2008-07-29 Thread Nicholas Williams
Can you please run the dig query you are performing and and copy and paste the entire results, top-to-bottom, into this email? Nick Jeffrey Hathaway wrote: I should also add that pDNS says there wasnt any problems. - jeff On Tue, Jul 29, 2008 at 5:53 PM, Jeffrey Hathaway <[EMAIL PROTECTED

Re: [Pdns-users] ZoneTransfers

2008-07-29 Thread Jeffrey Hathaway
I should also add that pDNS says there wasnt any problems. - jeff On Tue, Jul 29, 2008 at 5:53 PM, Jeffrey Hathaway <[EMAIL PROTECTED]>wrote: > Ok, > > Well then this brings up another problem. A Bind server at my ISP is > trying to gather my zone files. But it comes back in thier log files a

Re: [Pdns-users] ZoneTransfers

2008-07-29 Thread Jeffrey Hathaway
Ok, Well then this brings up another problem. A Bind server at my ISP is trying to gather my zone files. But it comes back in thier log files as a bad response. Doesn't give any more info but that. Just as a bad response. we figures it would be because of the SOA deal. Any idea's? On Tue, J

Re: [Pdns-users] ZoneTransfers

2008-07-29 Thread Nicholas Williams
Jeff, I wondered about this at first, too. Then I discovered dig always displays an SOA record at the top and at the bottom when you perform a zone transfer. You can demonstrate this by querying against a non-PowerDNS (BIND) server: $ dig @dns1.nicholaswilliams.net nicholaswilliams.net AXFR

[Pdns-users] ZoneTransfers

2008-07-29 Thread Jeffrey Hathaway
Hello, I got a issue. I got PowerDNs and am doing Zonetransfers to another server (my ISP). However, when doing a zonetransfer, two SOA records are being Sent. A SOA record at the top and at the bottom. to view this example, do this in a terminal dig axfr @24.213.94.98 62.102.24.in-addr.arpa

Re: [Pdns-users] Is this possible

2008-07-29 Thread bert hubert
On Tue, Jul 29, 2008 at 05:35:44PM -0400, Joseph Dobransky wrote: > pdns-recursor as a simple caching nameserver? I have tried it several Joseph, Tens of millions of internet users are served exclusively by the pdns recursor, so you'd think it would work! :-) One of the snags you may be hitting

[Pdns-users] Is this possible

2008-07-29 Thread Joseph Dobransky
pdns-recursor as a simple caching nameserver? I have tried it several times but for whatever reason, I can never get it to "answer" so I am probably setting something up wrong. pdns .21 authoritive has been working great for years now so it's not like I am a dolt or anything but I am probably

Re: Can pdns-recursor forward . ? / Re: [Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread bert hubert
On Tue, Jul 29, 2008 at 01:37:27PM +0200, Leen Besselink wrote: > Is it a Visual Studio or something like cygwin you use to compile it ? Visual studio express works very well, and it is a free (if complicated) download. Bert -- http://www.PowerDNS.com Open source, database driven D

[Pdns-users] Re: Can pdns-recursor forward . ? / Re: Where can I download Windows binaries?

2008-07-29 Thread Christof Meerwald
On Tue, 29 Jul 2008 23:13:07 +0200, Leen Besselink wrote: >> Wouldn't simple UDP forwarding be sufficient in this case? (but you would >> still need to find a program to do the UDP forwarding) > Yes, I guess that is possible. You'd lose source port randomisation, > all the rage these days and cachi

Re: [Pdns-users] DNS poisoning and spoof-nearmiss-max

2008-07-29 Thread bert hubert
Hi J, Please find my answers below. On Tue, Jul 29, 2008 at 05:00:34PM -0400, J Knight wrote: > What is the Recursor's exact detection method and reaction > in relation to the spoof-nearmiss-max config parameter? > > Do internal counters for an outstanding query record > - answers coming back fr

[Pdns-users] Re: Can pdns-recursor forward . ? / Re: Where can I download Windows binaries?

2008-07-29 Thread Leen Besselink
On Tue, Jul 29, 2008 at 10:02:17PM +0200, Christof Meerwald wrote: > On Tue, 29 Jul 2008 12:49:24 +0200, Leen Besselink wrote: > [...] > > And Windows XP doesn't support DNS over IPv6, installing a local > > forwarding IPv6-enabled PowerDNS-recursor might a be solution to > > that ? Can I forward .

[Pdns-users] DNS poisoning and spoof-nearmiss-max

2008-07-29 Thread J Knight
What is the Recursor's exact detection method and reaction in relation to the spoof-nearmiss-max config parameter? Do internal counters for an outstanding query record - answers coming back from other authoritative (or ANY) servers than the one asked? - any mismatch (not just an "approximate" mi

[Pdns-users] Re: Can pdns-recursor forward . ? / Re: Where can I download Windows binaries?

2008-07-29 Thread Christof Meerwald
On Tue, 29 Jul 2008 12:49:24 +0200, Leen Besselink wrote: [...] > And Windows XP doesn't support DNS over IPv6, installing a local > forwarding IPv6-enabled PowerDNS-recursor might a be solution to > that ? Can I forward . ? I've never tried it. > > Hmm, maybe there is an easier way to do this ? W

Re: [Pdns-users] Exception: unknown escape sequence on NAPTR regex

2008-07-29 Thread Peter Fern
bert hubert wrote: On Tue, Jul 29, 2008 at 05:08:26PM +1000, Peter Fern wrote: No one else is serving NAPTR E2U expressions from PowerDNS? Peter, Sorry for the late replay. In fact, quite a number of people are doing such things with PowerDNS. No problem Bert, thank you for the r

Re: Can pdns-recursor forward . ? / Re: [Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread Leen Besselink
On Tue, Jul 29, 2008 at 12:53:04PM +0200, bert hubert wrote: > On Tue, Jul 29, 2008 at 12:49:24PM +0200, Leen Besselink wrote: > > I have an other reason I might want a windows binary. In this case > > for PowerDNS-recursor. > > You can compile the powerdns recursor on windows if you are reasonabl

Re: [Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread bert hubert
On Tue, Jul 29, 2008 at 12:24:36PM +0200, Rick Jansen wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I think there would be a lot more interest from Windows Server users, if > recent download packages would be available. And Windows users, I think, > are often more commercial users,

Re: Can pdns-recursor forward . ? / Re: [Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread bert hubert
On Tue, Jul 29, 2008 at 12:49:24PM +0200, Leen Besselink wrote: > I have an other reason I might want a windows binary. In this case > for PowerDNS-recursor. You can compile the powerdns recursor on windows if you are reasonably windows savvy. It takes me around two days to get it working usually.

Can pdns-recursor forward . ? / Re: [Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread Leen Besselink
I have an other reason I might want a windows binary. In this case for PowerDNS-recursor. When I'm going to deploy IPv6, I would really like to have an IPv6-only network behind the (currently NAT) firewall. And Windows XP doesn't support DNS over IPv6, installing a local forwarding IPv6-enabled P

Re: [Pdns-users] Use recursor to block phishing

2008-07-29 Thread bert hubert
On Tue, Jul 29, 2008 at 07:30:13AM -0300, sysadmin wrote: > > This should simply be: > > zonadelafrontera.cl=malware > > this format doesn't work too, the result still the same: Marlon, Please show your entire recursor configuration - I wonder if your file is actually being loaded! Bert

Re: [Pdns-users] Use recursor to block phishing

2008-07-29 Thread sysadmin
> This should simply be: > zonadelafrontera.cl=malware this format doesn't work too, the result still the same: arwen powerdns # dig query zonadelafrontera.cl +short 164.77.228.194 Should I change the format of "malware" file ? Do not use the wildcard * ? Regards, Marlon ___

Re: [Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread Rick Jansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think there would be a lot more interest from Windows Server users, if recent download packages would be available. And Windows users, I think, are often more commercial users, with money. Money to make PowerDNS better. So instead of: Wait for int

Re: [Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread bert hubert
On Tue, Jul 29, 2008 at 09:48:15AM +, Annoyed Tuna wrote: > Does anyone know where I can download Win32 binaries for 2.9.21? Hello 'Annoyed Tuna', I'm afraid there are no windows binaries for 2.9.21 - they are a lot of work to create and we don't get enough interest for them. Sorry. -- htt

Re: [Pdns-users] Exception: unknown escape sequence on NAPTR regex

2008-07-29 Thread bert hubert
On Tue, Jul 29, 2008 at 05:08:26PM +1000, Peter Fern wrote: > No one else is serving NAPTR E2U expressions from PowerDNS? Peter, Sorry for the late replay. In fact, quite a number of people are doing such things with PowerDNS. Can you try doubling the \, so: 100 0 "u" "E2U+sip" "!^\\+([0-9][0-9

[Pdns-users] Where can I download Windows binaries?

2008-07-29 Thread Annoyed Tuna
Does anyone know where I can download Win32 binaries for 2.9.21? tuna __ Not happy with your email address?. Get the one you really want - millions of new email addresses available now at Yahoo! http://uk.docs.yahoo.com/ymail/new.ht

Re: [Pdns-users] Exception: unknown escape sequence on NAPTR regex

2008-07-29 Thread Peter Fern
No one else is serving NAPTR E2U expressions from PowerDNS? Peter Fern wrote: Hello list, I am attempting to serve NAPTR records with E2U regular expressions, requiring escaping of characters by employing a '\', eg: 100 0 "u" "E2U+sip" "!^\+([0-9][0-9][0-9])$!sip:[EMAIL PROTECTED]" . I'm runni

Re: [Pdns-users] Use recursor to block phishing

2008-07-29 Thread bert hubert
On Mon, Jul 28, 2008 at 10:39:04PM -0300, sysadmin wrote: > > Regular zonefile format, with the exception of wildcards. > I setup recursor to load zone file as follow > * IN A 127.0.0.1 A * is a wildcard - which sadly does not work yet in the powerdns recursor auth server.