Re: [Pdns-users] PDNS Server migration - Using AXFR to a Slave-Capable Backend

2017-11-22 Thread Mislav | SysAdmin
aused trouble). But more importantly, to do NSEC3 correctly, we need to be able to prove existence of these shorter names. The type=NULL records entry gives us a place to store the NSEC3 hash of these names." Thanks everyone. On 20.11.2017 09:00, Mislav | SysAdmin wrote: Anyone has some other

Re: [Pdns-users] PDNS Server migration - Using AXFR to a Slave-Capable Backend

2017-11-20 Thread Mislav | SysAdmin
Anyone has some other ideas how to troubleshoot this, or can confirm that this is normal behavior in new 4.1.0.? On 16.11.2017 15:36, Mislav | SysAdmin wrote: Is this something new by default in 4.1.0? We don't have DNSSEC enabled in old environment, if this is DNSSEC related.

Re: [Pdns-users] PDNS Server migration - Using AXFR to a Slave-Capable Backend

2017-11-16 Thread Mislav | SysAdmin
Is this something new by default in 4.1.0? We don't have DNSSEC enabled in old environment, if this is DNSSEC related. On 16.11.2017 15:25, David wrote: On 2017-11-16 2:07 AM, Mislav | SysAdmin wrote: Hi. I've the following setup: 1) pdns server version 3.1 - with mysql backe

[Pdns-users] PDNS Server migration - Using AXFR to a Slave-Capable Backend

2017-11-16 Thread Mislav | SysAdmin
Hi. I've the following setup: 1) pdns server version 3.1 - with mysql backend 2) pdns server version 4.1.0 - with mysql backend What I'm trying to do is: - replace version 3.1 with 4.1.0 and I've installed clean version of 4.1.0 to a new server and I'm trying to this this now: https://doc.power

Re: [Pdns-users] PDNS recursive problem - NXDOMAIN - CNAME resolving

2017-11-13 Thread Mislav | SysAdmin
This all finally makes sense. Thank you very much Brian, big time. On 13.11.2017 11:01, Brian Candler wrote: On 13/11/2017 09:50, Mislav | SysAdmin wrote: Yes, "ns1.private.ch" is a made-up name, that's correct. I'm running Debian 9 with pdns-recursor-server installed vi

Re: [Pdns-users] PDNS recursive problem - NXDOMAIN - CNAME resolving

2017-11-13 Thread Mislav | SysAdmin
_recursor, but if I do it from outside, recursing goes through pdns_server and that is the problem. On 13.11.2017 10:30, Brian Candler wrote: On 13/11/2017 09:05, Mislav | SysAdmin wrote: Hi. I've noticed some problems with CNAME resolving on our pdns server. Here is the example: $ n

[Pdns-users] PDNS recursive problem - NXDOMAIN - CNAME resolving

2017-11-13 Thread Mislav | SysAdmin
Hi. I've noticed some problems with CNAME resolving on our pdns server. Here is the example: $ nslookup mobile-universe.ch ns1.private.ch Server:        ns1.private.ch Address:    private#53 Non-authoritative answer: Name:    mobile-universe.ch Address: 18.194.35.161 $ nslookup www.mobile-unive

[Pdns-users] "redirect" queries

2009-01-28 Thread sysadmin
Hi, It's possible setup recursor to point to a specific A record instead return a error, if a domain do not exist ? For example when a user made a typo in browser www.powerdnsss.com redirect to a webserver that will show a page with a "typo error message". Regards, Marlon ___

Re: [Pdns-users] Use recursor to block phishing

2008-07-30 Thread sysadmin
And... follow the log: Jul 30 07:17:53 [pdns_recursor] PowerDNS recursor 3.1.7 (C) 2001-2008 PowerDNS.COM BV (Jul 20 2008, 23:16:13, gcc 4.2.2 (Gentoo 4.2.2 p1.0)) starting up Jul 30 07:17:53 [pdns_recursor] PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome

Re: [Pdns-users] Use recursor to block phishing

2008-07-29 Thread sysadmin
> Please show your entire recursor configuration - I wonder if your file is > actually being loaded! Follow the recursor.conf: # Drop uid setuid=nobody # Drop gid setgid=nobody # Don't log queries quiet=on # Local IP address to bind to local-address=10.1.1.140 # Local port to bind to local-p

Re: [Pdns-users] Use recursor to block phishing

2008-07-29 Thread sysadmin
> This should simply be: > zonadelafrontera.cl=malware this format doesn't work too, the result still the same: arwen powerdns # dig query zonadelafrontera.cl +short 164.77.228.194 Should I change the format of "malware" file ? Do not use the wildcard * ? Regards, Marlon ___

Re: [Pdns-users] Use recursor to block phishing

2008-07-28 Thread sysadmin
Hi, > Regular zonefile format, with the exception of wildcards. > > Bert I setup recursor to load zone file as follow recursor.conf: auth-zones=malware=/etc/powerdns/malware arwen powerdns # cat malware $TTL900 @ IN SOA zone.malware. hostmaster.zone.