Re: [Pdns-users] DNSSEC and CNAME records results NXDOMAIN

2022-04-22 Thread Marijn via Pdns-users
Thank you for investigating and pointing this out. There was a zone with the domain name "." (just a dot), which caused the issue. I removed this zone and now it seems to work. Thank you very much for your help! Klaus Darilion wrote on 2022-04-22 21:41: I think I have found the problem: Your

Re: [Pdns-users] DNSSEC and CNAME records results NXDOMAIN

2022-04-22 Thread Klaus Darilion via Pdns-users
I think I have found the problem: Your name server also has configured a root zone: # dig @ns1.mijn.host. sdfdsafdsagdafdgsdgffg.dfdsafs ; <<>> DiG 9.11.3-1ubuntu1.17-Ubuntu <<>> @ns1.mijn.host. sdfdsafdsagdafdgsdgffg.dfdsafs ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEAD

Re: [Pdns-users] DNSSEC and CNAME records results NXDOMAIN

2022-04-22 Thread Marijn via Pdns-users
I fill the records with the API. However when I check the SOA file (see below) it looks correct (hostmaster.egogo.eu). But with "dig @ns1.mijn.host. autodiscover.egogo.eu" it shows an incorrect value. MariaDB [powerdns]> SELECT * FROM domains WHERE id = 9644; +--+--++--

Re: [Pdns-users] DNSSEC and CNAME records results NXDOMAIN

2022-04-22 Thread Klaus Darilion via Pdns-users
And how do you fill records into the mysql db? Can you show the relevenat rows of the records and domains table? regards Klaus > -Ursprüngliche Nachricht- > Von: Pdns-users Im > Auftrag von Marijn via Pdns-users > Gesendet: Freitag, 22. April 2022 18:54 > An: pdns-users@mailman.powerdns.

Re: [Pdns-users] DNSSEC and CNAME records results NXDOMAIN

2022-04-22 Thread Marijn via Pdns-users
I have pdnsutil 4.5.4 running with MySQL backend and native MySQL replication. In pdns.conf I have the following value. Maybe the @ doesn't work? default-soa-content=ns1.mijn.host hostmaster.@ 0 10800 3600 604800 3600 Klaus Darilion schreef op 2022-04-22 18:06: I do not see any difference of

Re: [Pdns-users] DNSSEC and CNAME records results NXDOMAIN

2022-04-22 Thread Klaus Darilion via Pdns-users
I do not see any difference of the two cases. But in any case, returning an answer AND nxdomain is just broken. # dig @ns1.mijn.host. autodiscover.egogo.eu ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62514 ... ;; QUESTION SECTION: ;autodiscover.egogo.eu. IN A ;; ANSWER SEC

[Pdns-users] DNSSEC and CNAME records results NXDOMAIN

2022-04-22 Thread Marijn via Pdns-users
I have PowerDNS 4.5.1 running. DNSSEC is working on the domain: https://dnssec-analyzer.verisignlabs.com/egogo.eu --- But when I have DNSSEC active and I create a CNAME record, which doesn't have DNSSEC, I get a NXDOMAIN error. ``` $ dig CNAME autodiscover.egogo.eu +short autodiscover.outloo