Re: [Pdns-users] Lua Scripting

2014-12-12 Thread Jason Frisvold
Peter van Dijk wrote: > Hello Jason, > > In that case it’s easiest to have a second auth server for internal data, and > make sure your recursor talks to that one. You can use forward-zones in the > recursor to make that happen. Hrm.. I guess I can do that.. I'll have to play games with what

Re: [Pdns-users] Lua Scripting

2014-12-12 Thread Peter van Dijk
Hello Jason, On 12 Dec 2014, at 19:07 , Jason Frisvold wrote: > Peter van Dijk wrote: >> Hello Jason, >> >> If your clients are end hosts (i.e. machines with the equivalent of >> resolv.conf), they should always be talking to a recursor. If your ‘view’ >> needs are simple (just a few overridd

Re: [Pdns-users] Lua Scripting

2014-12-12 Thread Jason Frisvold
Peter van Dijk wrote: > Hello Jason, > > If your clients are end hosts (i.e. machines with the equivalent of > resolv.conf), they should always be talking to a recursor. If your ‘view’ > needs are simple (just a few overridden IPs here and there), using pre- or > postresolve in the PowerDNS Rec

[Pdns-users] metronome

2014-12-12 Thread Keresztes Péter-Zoltán
Hello guy, I have tried to get metronome on a server to test it. When I run make I get lots of errors. # make g++ -Wall -O3 -ggdb -I. -I yahttp/yahttp -pthread -MMD -MP -std=gnu++0x-c -o metronome.o metronome.cc In file included from metronome.cc:2: iputils.hh:36:34: warning: boost/lexic

Re: [Pdns-users] [oss-security] PowerDNS Security Advisory 2014-02

2014-12-12 Thread Peter van Dijk
Hi everybody, today, ANSSI has released their report on the issue. You can find it at http://www.ssi.gouv.fr/en/the-anssi/events/vulnerabilty-disclosure-the-infinitely-delegating-name-servers-idns-attack.html Based on this, we realise our original announcement was missing one detail. The follow

Re: [Pdns-users] Lua Scripting

2014-12-12 Thread Peter van Dijk
Hello Jason, On 09 Dec 2014, at 18:45 , Jason Frisvold wrote: > I'm in the midst of transitioning from a BIND-based DNS system to a > PowerDNS one. For a myriad of reasons, I need to mimic the views > functionality that BIND has within PowerDNS. It *appears* that I can do > this via Lua script

Re: [Pdns-users] Workaround for PowerDNS Security Advisory 2014-02

2014-12-12 Thread sthaug
> You can update auth-zones using 'rec_control reload-zones' at runtime > without restarting the recursor, which will discover new zones to be blocked > or no no longer blocked. A couple of questions regarding reload-zones: - Is PowerDNS recursor meant to have a coherent cache? The observed behav