[Pdns-users] API listening address/port

2021-08-20 Thread MRob via Pdns-users
Hi, the API docs shows that it listens at 127.0.0.1:8081 I only see 3 api config vars-- is there any settings for API listening port or interfaces? ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listin

Re: [Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

2019-02-06 Thread MRob
On 2019-02-04 10:20, Remi Gacogne wrote: Hi, On 2/4/19 11:11 AM, MRob wrote: Version is 4.0.0-alpha2 from repo where nothing newer available. Would it be productive to use repo supplied by powerdns.com, I mean is it possible a bug is in this version and has been fixed. Please start by

Re: [Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

2019-02-04 Thread MRob
On 2019-02-04 10:40, MRob wrote: On 2019-02-04 10:21, Ruben d'Arco wrote: Hi MRob, The DNS Update specification (RFC2136) has a section that allows a DNS update to do check (pre-requisites) before applying the update. PDNS performs these checks, and it seems that the current records of

Re: [Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

2019-02-04 Thread MRob
On 2019-02-04 10:21, Ruben d'Arco wrote: Hi MRob, The DNS Update specification (RFC2136) has a section that allows a DNS update to do check (pre-requisites) before applying the update. PDNS performs these checks, and it seems that the current records of your domain do not comply with thos

[Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

2019-02-04 Thread MRob
Trying to use DNS updates but seeing the error in our logs "Failed PreReqqisites check, returning 6". Could someone explain what "prerequisites check" is and what can cause it to fail? What things should I check? Here is pdns log from one instance Feb 3 03:20:17 test pdns[20989]: Query: begin

Re: [Pdns-users] NOTIFY response timeout value? (repeat NOTIFY slave error)

2018-12-11 Thread MRob
On 2018-12-11 16:03, Remi Gacogne wrote: On 12/7/18 6:10 PM, MRob wrote: NOTIFY 3sec timeout is hardcoded? ANyone please confirm? At a quick glance, it looks like the first attempt has a 3s timeout, the second one 5s, the third one 9s and the last one 17s: https://github.com/PowerDNS/pdns

Re: [Pdns-users] NOTIFY response timeout value? (repeat NOTIFY slave error)

2018-12-07 Thread MRob
NOTIFY 3sec timeout is hardcoded? ANyone please confirm? On 2018-12-05 18:43, MRob wrote: Hello, when supermaster send NOTIFY for large number of domain I think some NOTIFYs get re-sent. On first time slave setup that cause errors so I was looking do pdns have setting to delay re-NOTIFY

[Pdns-users] NOTIFY response timeout value? (repeat NOTIFY slave error)

2018-12-05 Thread MRob
Hello, when supermaster send NOTIFY for large number of domain I think some NOTIFYs get re-sent. On first time slave setup that cause errors so I was looking do pdns have setting to delay re-NOTIFY timeout? Loglevel 6 doesnt say "no response so I will re-notify" however I see hint of two notif

Re: [Pdns-users] How to understand cause of rejected notify

2018-12-01 Thread MRob
All supermaster problems I know of can be resolved by checking the checklist: https://doc.powerdns.com/authoritative/modes-of-operation.html?highlight=supermaster#supermaster-automatic-provisioning-of-slaves * supermaster support must be enabled I already asked about this on unanswered inquiry

[Pdns-users] How to understand cause of rejected notify

2018-12-01 Thread MRob
As I have had no luck to understand why supermaster only create entry in ``domains'' table but not in ``records'' and AXFR never happen again (https://mailman.powerdns.com/pipermail/pdns-users/2018-November/025624.html) I think maybe it's a bug in pdns 4.1 so I install 4.2 on slave (master stil

Re: [Pdns-users] pipe backend logging

2018-11-30 Thread MRob
: libsodium Arch: x86_64 Version : 1.0.5 Thats out of deate. Probably to ask somewhere why you are not pulling newest epel packaging. Release : 1.el7 Size: 350 k Repo: installed From repo : epel Summary : The Sodium crypto library URL : http://l

Re: [Pdns-users] pipe backend logging

2018-11-30 Thread MRob
On 2018-11-30 19:37, Randall Diffenderfer via Pdns-users wrote: using centos rpm for powerdns, version 3.4.11 (this would seem to be old, but it's what they supply). you can update just use pdns repo to save headaches https://repo.powerdns.com/ ___ Pd

Re: [Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
7;m out of ideas? On 2018-11-30 18:55, MRob wrote: On 2018-11-30 17:22, MRob wrote: On 2018-11-30 16:55, MRob wrote: I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? I should say original

Re: [Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
On 2018-11-30 17:22, MRob wrote: On 2018-11-30 16:55, MRob wrote: I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? I should say original there was a error on the slave which fixed and

Re: [Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
On 2018-11-30 16:55, MRob wrote: I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? I should say original there was a error on the slave which fixed and restarted pdns. slave-cycle-interval is

[Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listin

[Pdns-users] supermaster setting purpose?

2018-11-21 Thread MRob
Running version 4.1, there is no supermaster setting in the main config (doc says it added in 4.2) but I understand supermaster feature should work under 4.1, is that correct? When migrating to 4.2 what feature does ''supermaster=yes'' add for having in config file? Must I remove ''master=yes'

Re: [Pdns-users] Increment SOA programmatically?

2018-11-20 Thread MRob
On 2018-11-21 03:49, MRob wrote: On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote: On 11/5/2018 9:15 AM, MRob wrote: still, it didn't work with auto-serial configuration: > pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'

Re: [Pdns-users] Increment SOA programmatically?

2018-11-20 Thread MRob
On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote: On 11/5/2018 9:15 AM, MRob wrote: still, it didn't work with auto-serial configuration: > pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'): missing field at the end

Re: [Pdns-users] pdnsutil increase-serial not working for mysql with autoserial

2018-11-07 Thread MRob
in fact after reboot looks like old serial is lost for all domains. why is change_date not kept up to date? all domains have it to be NULL, I think its where the serial is derived from when using autoserial On 2018-11-07 20:18, MRob wrote: Please some help for this? Looks like pdnsutil

[Pdns-users] pdnsutil increase-serial not working for mysql with autoserial

2018-11-07 Thread MRob
Please some help for this? Looks like pdnsutil increase-serial not made to work for mysql backend with autoserial, so how to programmatically request increase serial? pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'): missing field at the end of

Re: [Pdns-users] Increment SOA programmatically?

2018-11-06 Thread MRob
So... any to help on this below keeping in mind I use autoserial? I use mysql backend and SOA serial set to 0 in datebase for auto-serial features. But sometime come occasion we must update one record in database directly, not using DNSUPDATE. In this case how to tell pdns please update SOA s

Re: [Pdns-users] Increment SOA programmatically?

2018-11-06 Thread MRob
On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote: On 11/5/2018 9:15 AM, MRob wrote: still, it didn't work with auto-serial configuration: > pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'): missing field at the end

Re: [Pdns-users] Increment SOA programmatically?

2018-11-05 Thread MRob
On 2018-11-05 16:49, Nico CARTRON wrote: Hi MRob, On 05-nov-2018 17:34 CET, wrote: On 2018-11-05 10:57, Torsten Hantzsche wrote: > On Sun, 4 Nov 2018, MRob wrote: > > > > I use mysql backend and SOA serial set to 0 in datebase for > > auto-serial features. But sometime

Re: [Pdns-users] Increment SOA programmatically?

2018-11-05 Thread MRob
On 2018-11-05 10:57, Torsten Hantzsche wrote: On Sun, 4 Nov 2018, MRob wrote: I use mysql backend and SOA serial set to 0 in datebase for auto-serial features. But sometime come occasion we must update one record in database directly, not using DNSUPDATE. In this case how to tell pdns

[Pdns-users] Increment SOA programmatically?

2018-11-03 Thread MRob
I use mysql backend and SOA serial set to 0 in datebase for auto-serial features. But sometime come occasion we must update one record in database directly, not using DNSUPDATE. In this case how to tell pdns please update SOA serial? I cant find pdns_control, pdnsutil command for this. Relate

Re: [Pdns-users] How to reload RPZ from file?

2018-05-07 Thread MRob
On 2018-04-28 21:25, MRob wrote: On 2018-04-18 01:04, MRob wrote: With: rpzFile("dblfilename", {defpol=Policy.Custom, defcontent="badserver.example.com"}) Is there a 'nice' way to make Recursor reload this file? Does rec_control reload-zones do it? Must I restart r

Re: [Pdns-users] Error with rec_control reload

2018-05-07 Thread MRob
On 2018-05-07 09:19, Remi Gacogne wrote: On 05/07/2018 11:02 AM, Aki Tuomi wrote: Can you run sudo strace -econnect,bind rec_control reload-lua-script and post the result? yes, thanks for your help bind(3, {sa_family=AF_LOCAL, sun_path="/var/run/lsock6hPxMw"}, 110) = 0 connect(3, {sa_famil

Re: [Pdns-users] Error with rec_control reload

2018-05-07 Thread MRob
On 2018-05-07 07:16, Aki Tuomi wrote: On 07.05.2018 09:58, MRob wrote: On 2018-05-07 06:50, Aki Tuomi wrote: On 07.05.2018 09:48, MRob wrote: Hi can anyone explain what this means and if it is important or can be ignored? I only find unanswered mailing list posts about it. $ sudo

Re: [Pdns-users] Error with rec_control reload

2018-05-06 Thread MRob
On 2018-05-07 06:50, Aki Tuomi wrote: On 07.05.2018 09:48, MRob wrote: Hi can anyone explain what this means and if it is important or can be ignored? I only find unanswered mailing list posts about it. $ sudo rec_control reload-lua-script pdns_recursor: Error dealing with control socket

[Pdns-users] Error with rec_control reload

2018-05-06 Thread MRob
Hi can anyone explain what this means and if it is important or can be ignored? I only find unanswered mailing list posts about it. $ sudo rec_control reload-lua-script pdns_recursor: Error dealing with control socket request: Unable to send message over control channel '/var/run/lsockl2eLnQ':

Re: [Pdns-users] How to reload RPZ from file?

2018-04-28 Thread MRob
On 2018-04-18 01:04, MRob wrote: With: rpzFile("dblfilename", {defpol=Policy.Custom, defcontent="badserver.example.com"}) Is there a 'nice' way to make Recursor reload this file? Does rec_control reload-zones do it? Must I restart recursor? `rec_control reload-zon

[Pdns-users] How to reload RPZ from file?

2018-04-17 Thread MRob
With: rpzFile("dblfilename", {defpol=Policy.Custom, defcontent="badserver.example.com"}) Is there a 'nice' way to make Recursor reload this file? Does rec_control reload-zones do it? Must I restart recursor? ___ Pdns-users mailing list Pdns-users@mailm

Re: [Pdns-users] Lua control of config settings?

2018-04-17 Thread MRob
On 2018-04-17 05:24, MRob wrote: On 2018-04-16 10:55, MRob wrote: On 2018-04-16 10:09, Remi Gacogne wrote: On 04/16/2018 12:03 PM, MRob wrote: According to this, you *should* be able to load a million domains into LUA without problem.  That's the same method this person said cr

Re: [Pdns-users] dp.variable when changing RPZ policy action?

2018-04-17 Thread MRob
On 2018-04-17 07:00, Brian Candler wrote: On 17/04/2018 06:42, MRob wrote: But this example for modifying policy actions does not set dq.variable: https://doc.powerdns.com/md/recursor/scripting/#modifying-policy-decisions The documentation is very clear as to what dq.variable does: in the

Re: [Pdns-users] dp.variable when changing RPZ policy action?

2018-04-16 Thread MRob
On 2018-04-17 05:42, MRob wrote: PowerDNS blog recommends setting dq.variable when a domain response is part of the loaded block list. https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But this example for modifying policy actions does not set

[Pdns-users] dp.variable when changing RPZ policy action?

2018-04-16 Thread MRob
PowerDNS blog recommends setting dq.variable when a domain response is part of the loaded block list. https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But this example for modifying policy actions does not set dq.variable: https://doc.powerdns.com/m

Re: [Pdns-users] Lua control of config settings?

2018-04-16 Thread MRob
On 2018-04-16 10:55, MRob wrote: On 2018-04-16 10:09, Remi Gacogne wrote: On 04/16/2018 12:03 PM, MRob wrote: According to this, you *should* be able to load a million domains into LUA without problem.  That's the same method this person said crashed recursor with much less

Re: [Pdns-users] How to make Policy.NODATA response in policy zone?

2018-04-16 Thread MRob
On 2018-04-16 11:40, bert hubert wrote: On Mon, Apr 16, 2018 at 11:33:17AM +, MRob wrote: I can make NXDOMAIN applied policy for a domain in policy zone with this: example.com CNAME . But how to cause NODATA response? Hello "MRob", We recommend that you read the documentatio

[Pdns-users] How to make Policy.NODATA response in policy zone?

2018-04-16 Thread MRob
I can make NXDOMAIN applied policy for a domain in policy zone with this: example.com CNAME . But how to cause NODATA response? ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] Lua control of config settings?

2018-04-16 Thread MRob
On 2018-04-16 10:09, Remi Gacogne wrote: On 04/16/2018 12:03 PM, MRob wrote: According to this, you *should* be able to load a million domains into LUA without problem.  That's the same method this person said crashed recursor with much less https://git.mauras.ch/Va

Re: [Pdns-users] Lua errors finding global objects in recent version

2018-04-16 Thread MRob
On 2018-04-16 07:45, Remi Gacogne wrote: Hi, On 04/16/2018 01:41 AM, MRob wrote: I have strange errors in LUA script like this: Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL Exception: [string "chunk"]:2: attempt to call global 'pdnslog'

Re: [Pdns-users] Lua control of config settings?

2018-04-16 Thread MRob
On 2018-04-16 07:01, Brian Candler wrote: On 15/04/2018 22:08, MRob wrote: I read about how recursor can be used to block queries for tracking domains: https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ You may find this interesting: https

[Pdns-users] Lua errors finding global objects in recent version

2018-04-15 Thread MRob
I have strange errors in LUA script like this: Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL Exception: [string "chunk"]:2: attempt to call global 'pdnslog' (a nil value) Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL Exception: [string "chunk

Re: [Pdns-users] Lua control of config settings?

2018-04-15 Thread MRob
On 2018-04-15 21:08, MRob wrote: I read about how recursor can be used to block queries for tracking domains: https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But I also read it chokes recursor if the list is many thousands domains: https

[Pdns-users] Lua control of config settings?

2018-04-15 Thread MRob
I read about how recursor can be used to block queries for tracking domains: https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But I also read it chokes recursor if the list is many thousands domains: https://git.mauras.ch/Various/powerdns_recurs

Re: [Pdns-users] Authority not refreshing stale mysql connections?

2016-11-24 Thread MRob
On 2016-11-24 12:49, bert hubert wrote: MRob, It is tremendously helpful if you let us know which version of PowerDNS you are running and on which platform. We are aware of some versions of PowerDNS having this issue but we need to know what you are running. I'm sorry I left that o

[Pdns-users] Authority not refreshing stale mysql connections?

2016-11-24 Thread MRob
I have a mysql-backed authority set up locally serving the internal LAN domain on a test platform (very lightly used at the moment). It appears that after some time (hours), the DB connection goes stale and queries return with dig reporting status SERVFAIL. If I wait (not sure how long, but I t

Re: [Pdns-users] DDNS with TSIG not working, need assistance

2016-11-14 Thread MRob
On 2016-11-13 21:21, Aki Tuomi wrote: On Sun, Nov 13, 2016 at 05:56:50PM -0800, mro...@insiberia.net wrote: I'm having a hard time knowing how to debug this message: Packet for domain 'local.' denied: can't find TSIG key with name 'tsig.key.local.' and algorithm 'hmac-sha512.' Is that a small