Re: [Pdns-users] Workaround for PowerDNS Security Advisory 2014-02

2014-12-10 Thread Vu Le
> auth-zones is good. Even better would be 'auth-zones-from-file' with > one domain name per line. > > It would also be good to have some more discussion of the best way to > battle the latest round of .domain lookups from compromised > clients. We're currently seeing a significant number of A loo

Re: [Pdns-users] Workaround for PowerDNS Security Advisory 2014-02

2014-12-10 Thread bert hubert
Hi everybody, We're talking to many impacted PowerDNS users today. No matter what version of the PowerDNS Recursor you run, if you have any problems with ezdns/tracker.istole.it/ezrss/eztv domains today, we recommend the 'nullzoning' from below. Bert On Tue, Dec 09, 2014 at 03:31:35PM +

Re: [Pdns-users] Workaround for PowerDNS Security Advisory 2014-02

2014-12-10 Thread sthaug
> From PowerDNS users we have heard of problems caused by various domain names > related to PowerDNS Security Advisory 2014-02 (CVE-2014-8601), > http://doc.powerdns.com/md/security/powerdns-advisory-2014-02/ > > If you are not yet in a position to upgrade to 3.6.2, or even if you have > upgraded

Re: [Pdns-users] Powerdns doesn't send type ANY request to the pipe backend

2014-12-10 Thread sumit sharma
Is there a way in which i can set powerdns to behave as "all authoritative server". If its possible then I can get rid of all these SOA record handling in my backend script and just deliver A & TXT records. Regards, Sumit On Wed, Dec 10, 2014 at 2:13 PM, sumit sharma wrote: > Hi Bert, > > I hav

Re: [Pdns-users] Powerdns doesn't send type ANY request to the pipe backend

2014-12-10 Thread sumit sharma
Hi Bert, I have set all these values to 0. Additionally # /usr/bin/pdns_control ccounts negative queries: 0, queries: 0, non-recursive packets: 0, recursive packets: 0 Is there some problem with the RRs i have created. For all the RRs i am using ttl = 0 and serial = -1 E.g. SOA 0 -1

Re: [Pdns-users] Powerdns doesn't send type ANY request to the pipe backend

2014-12-10 Thread bert hubert
On Wed, Dec 10, 2014 at 01:59:01PM +0530, sumit sharma wrote: > From my update, the cache is set to 0. > And i have verified that there is always a packetcache MISS. This is probably the query cache, which you can disable separately: query-cache-ttl=0 negquery-cache-ttl=0 Can you try that?

Re: [Pdns-users] Powerdns doesn't send type ANY request to the pipe backend

2014-12-10 Thread sumit sharma
>From my update, the cache is set to 0. And i have verified that there is always a packetcache MISS. I don't understand the problem why powerdns does the following 1. 1st 3 requests, sends query requests for both SOA and ANY, one by one and displays the results as expected 3. 4th request onward, s