Re: [Pdns-users] DNSLink or IPFS Support in PowerDNS

2023-01-20 Thread Michael Loftis via Pdns-users
On Fri, Jan 20, 2023 at 12:28 Tom Barrett via Pdns-users < pdns-users@mailman.powerdns.com> wrote: > I would be interested in speaking with anyone who has experimented with > customizing PowerDNS to support IPFS or the DNSLink TXT record type. > There’s not anything for PowerDNS to do here. They’

Re: [Pdns-users] DNSKEY key-id in mysql backend

2023-01-20 Thread Jan-Piet Mens via Pdns-users
So my questions are : where does the key-id (returned in DNSKEY records) comes from and how I can get it from DB ? The key tag (or key ID) of a DNSKEY record is not stored in the database; it is a value which is calculated from the binary key; see RFC 4034, appendix B. Using pdnsutil show the D

[Pdns-users] DNSLink or IPFS Support in PowerDNS

2023-01-20 Thread Tom Barrett via Pdns-users
I would be interested in speaking with anyone who has experimented with customizing PowerDNS to support IPFS or the DNSLink TXT record type. Thanks Tom -- Thomas Barrett President EnCirca, Inc +1.781.942.9975 (office) 400 W. Cummings Park, Suite 1725 Woburn, MA 01801 USA ___

Re: [Pdns-users] Proxy mapped address used for allow-from

2023-01-20 Thread Robby Pedrica via Pdns-users
On Fri, 20 Jan 2023 at 17:58, Otto Moerbeek wrote: Please show your full configuration, including versions etc. Also, it is not clear which product you are using. The recursor docs say: "Note that once a Proxy Protocol header has been received, the source address from the proxy

Re: [Pdns-users] Docker image upgrade version issue

2023-01-20 Thread Robby Pedrica via Pdns-users
From: Erik Winkels via Pdns-users To: Robby Pedrica via Pdns-users Reply-To: Erik Winkels Date: Fri, Jan 20 2023 16:49:06 GMT-02:00 Subject:[Pdns-users] Docker image upgrade version issue Hi Robby,

Re: [Pdns-users] Docker image upgrade version issue

2023-01-20 Thread Erik Winkels via Pdns-users
Hi Robby, > On 01/20/2023 3:55 PM CET Robby Pedrica via Pdns-users > wrote: > > I've upgraded the pdns-recursor docker image today for the 4.8.0 vuln > recently noted. My version from pdns-recursor is now listed as: > > Version: PowerDNS recursor 0.0.0.0.HEAD.gHEAD > > This is different f

[Pdns-users] DNSKEY key-id in mysql backend

2023-01-20 Thread Support SimpleRezo via Pdns-users
Hi ! I'm looking for a way to get the key-id of a DNSKEY stored in mysql backend. In "cryptokeys" table, I have all the details of the key, except "key-id". I cannot find it anywhere else in my DB. So my questions are : where does the key-id (returned in DNSKEY records) comes from and how I can g

Re: [Pdns-users] Proxy mapped address used for allow-from

2023-01-20 Thread Otto Moerbeek via Pdns-users
Please show your full configuration, including versions etc. Also, it is not clear which product you are using. The recursor docs say: "Note that once a Proxy Protocol header has been received, the source address from the proxy header instead of the address of the proxy will be checked against th

[Pdns-users] Proxy mapped address used for allow-from

2023-01-20 Thread Robby Pedrica via Pdns-users
Hi all, I'm not sure if this is a change in behaviour or I simply haven't noticed this before but after upgrading my docker image today, I've seen queries being dropped due to the mapped address in my proxy mappings being used for allow-from rather than the src/original address. I use a private-pu

[Pdns-users] Docker image upgrade version issue

2023-01-20 Thread Robby Pedrica via Pdns-users
I've upgraded the pdns-recursor docker image today for the 4.8.0 vuln recently noted. My version from pdns-recursor is now listed as: Version: PowerDNS recursor 0.0.0.0.HEAD.gHEAD This is different from previous where it indicated the actual version, eg. 4.8.0. Is this expected or an issue? --

[Pdns-users] Security Advisory 2023-01 for PowerDNS Recursor 4.8.0

2023-01-20 Thread Otto Moerbeek via Pdns-users
Hello, Today we have released PowerDNS Recursor 4.8.1 due to a high severity issue found. Please find the full text of the advisory below. The [1]changelog is available. The [2]tarball ([3]signature) is available from our download [4]server. Patches are available at [5]patc