It *might* be worth to give this setting a try:
edns-subnet-whitelist=0.0.0.0/0, ::/0
But it depends on whether the client is talking to the Recursor over public or
private IP addresses.
https://doc.powerdns.com/recursor/settings.html#edns-subnet-allow-list
https://en.m.wikipedia.org/wiki/EDNS
Hi Luke,
You have to host the RPZ zone on a authoritative nameserver (PowerDNS
Authoritative for example) in order to load it using the rpzPrimary function.
The Recursor does not provide zonetransfers.
Winfried ___
Pdns-users mailing list
Pdns-users@m
Hi Eli,
To keep it simple, you could implement the solution outside the DNS server by
generating the different zones from a unified source, that contains both
information about each RR.
Winfried
Am 3. August 2022 01:43:38 MESZ schrieb eli glynn via Pdns-users
:
>I've recently inherited a re
> getPool("resolverTopnet"):getCache():printStats()
In one of your previous mails the pool name was "resolver".
Am 9. September 2022 17:38:10 MESZ schrieb SAMI RAHAL via Pdns-users
:
>Hi Remi
>
>The server is in production it receives requests as shown in this summary
>
>Uptime: 17 days, Number
The "NSEC3 proving non-existence" of this zone is broken. See
https://dnsviz.net/d/riecis.nl/dnssec/?rr=all&a=all&ds=all&doe=on&ta=.&tk=
You can workaround this issue by setting a NTA for it on your Recursors. It is
recommended to inform the owner of the zone in order to fix the root cause.
Win
True, TCP is broken as well.
Am 22. September 2022 10:01:58 MESZ schrieb Otto Moerbeek :
>On Thu, Sep 22, 2022 at 09:41:57AM +0200, abang--- via Pdns-users wrote:
>
>> The "NSEC3 proving non-existence" of this zone is broken. See
>> https://dnsviz.net/d/riecis.nl/dns
Hi,
We recently had a similar problem when we updated from 10.5.12 to 10.6.10.
The cause was that the default behavior changed from
innodb_flush_method = fsync
to
innodb_flush_method = O_DIREC
Which means, no kernel file caching.
If you have a too small
innodb_buffer_pool_size
in this ca
Hi Giovanni,
As far as I know, the Recursor is exactly doing what you want. IP addresses are
not part of the hash. Only the query name is base of the hash.
Identical query names are routed to the same thread and thus to the same cache.
Winfried
Am 28. November 2022 18:37:19 MEZ schrieb Giovan
Possibly related:
https://github.com/PowerDNS/pdns/issues/9112
Winfried
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
Am 7. März 2023 18:17:32 MEZ schrieb Adrian Minta via Pdns-users
:
>Thank you Otto !
>
>RPZ seems to be a very nice feature for malware domains blocking and other
>legal blocking requirements.
>
>Do you have a link with some examples on how it should be used ?
https://raw.githubusercontent.com
10 matches
Mail list logo
