Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Brian Candler via Pdns-users
On 20/03/2020 17:18, Giovanni Vecchi via Pdns-users wrote: I think the problem was that following zone forwarding need to be configured with "forwarding-zone*+*=" directive, but if I didn't find any feedback in the documentation (https://doc.powerdns.com/recursor/settings.html#forward-zones): m

Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Kevin P. Fleming via Pdns-users
'forward-zone' can only be specified one time in the configuration file. It accepts a list of domain/address pairs, though, so you can setup multiple domains for forwarding. On Fri, Mar 20, 2020 at 1:18 PM Giovanni Vecchi via Pdns-users < pdns-users@mailman.powerdns.com> wrote: > Hi Brian, > > I

Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Giovanni Vecchi via Pdns-users
Hi Brian, I missed that in configuration file multiple "forwarding-zone=" entries were present for different zone: I only wrote you the first of them that queries were failing, I'm sorry. I think the problem was that following zone forwarding need to be configured with "forwarding-zone*+*=" direct

Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Brian Candler via Pdns-users
Works for me, with 4.3.0-1pdns.bionic Added to recursor.conf: forward-zones=domain.sec=127.0.0.1:5300 Restarted pdns-recursor Test: root@cache1:~# dig @localhost testing.domain.sec a ; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> @localhost testing.domain.sec a ; (1 server found) ;; global options

Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Giovanni Vecchi via Pdns-users
Hi Brian sudo rec_control version *4.3.0* sudo dpkg -l | grep pdns-recursor *ii pdns-recursor 4.3.0-1pdns.bionic amd64PowerDNS Recursor* No queries arrive at all even with negative trust anchor: sudo rec_control get-ntas *Configured Negative Trus

[Pdns-users] First alpha release of dnsdist 1.5.0

2020-03-20 Thread Remi Gacogne via Pdns-users
Hello everyone, We are very happy to announce the 1.5.0 alpha 1 release of dnsdist. This version contains several new exciting features detailed below, but also a few breaking changes so please take the time to read the next section. Your feedback will be much appreciated so we can deliver a stabl

Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Brian Candler via Pdns-users
On 20/03/2020 10:56, Giovanni Vecchi via Pdns-users wrote: @Brian: my bad, my local domain isn't an ".local" one but ".sec", so please consider domain.sec as root domain The current behaviour is that public root domain are queried for every *.domain.sec from recursor instead the authoritative on

Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Giovanni Vecchi via Pdns-users
Hi everybody, @Brian: my bad, my local domain isn't an ".local" one but ".sec", so please consider domain.sec as root domain The current behaviour is that public root domain are queried for every *.domain.sec from recursor instead the authoritative one! My conf: config-dir=/etc/powerdns local-add

Re: [Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Brian Candler via Pdns-users
On 20/03/2020 10:38, Giovanni Vecchi via Pdns-users wrote: is there a "smart" way to instruct recursor to forward zone and each own "subdomain" to an authoritative server? Something like this: forward-zone=*.domain.local= The expectation is that queries to every level starting from domain.loc

[Pdns-users] Recursor and subdomain forward

2020-03-20 Thread Giovanni Vecchi via Pdns-users
Hi guys, is there a "smart" way to instruct recursor to forward zone and each own "subdomain" to an authoritative server? Something like this: forward-zone=*.domain.local= The expectation is that queries to every level starting from domain.local (ex: hello.domain.local, good.night.domain.local,

Re: [Pdns-users] Pdns RPZ logging

2020-03-20 Thread Otto Moerbeek via Pdns-users
On Thu, Mar 19, 2020 at 09:18:18AM +, Francis Turner via Pdns-users wrote: > All, > > > As you may know ThreatSTOP provides an RPZ service and it works on power DNS. > What doesn't quite work is logging and I'm trying to fix that. > > > My problem is that the documentation for what is out