Re: [Pdns-users] Unable to connect to SQLite database does not exist yet

2014-08-28 Thread bert hubert
On Thu, Aug 28, 2014 at 02:48:50PM -0500, Lists wrote: launch=gsqlite3 gsqlite3-database=/root/pdns.db I have also tried changing permissions and ownership of my pdns database file, thinking it was a permissions issue but I still get the following errors in /var/log/messages. gsqlite3:

Re: [Pdns-users] Pdns 3.4 API documentation

2014-09-04 Thread bert hubert
On Thu, Sep 04, 2014 at 08:45:31AM +0300, Péter-Zoltán Keresztes wrote: Hello, I know the API is still in early stage but is there any documentation for it? Hi Peter, What we have is here: https://github.com/PowerDNS/pdns/tree/master/pdns/docs/httpapi

Re: [Pdns-users] Recursion issue--SERVFAIL then NOERROR totally at random

2014-09-09 Thread bert hubert
Well, as long as one server works you should get an answer. Try setting a trace-regex on toyota and see what your powerdns reports! http://doc.powerdns.com/html/rec-control.html - trace-regex Bert On Tue, Sep 09, 2014 at 10:06:03AM -0700, Michael Loftis wrote: On Tue, Sep 9, 2014 at

Re: [Pdns-users] Recursion issue--SERVFAIL then NOERROR totally at random

2014-09-09 Thread bert hubert
...@mailman.powerdns.com] On Behalf Of bert hubert Sent: Tuesday, September 09, 2014 1:11 PM To: Michael Loftis Cc: pdns-users@mailman.powerdns.com Subject: Re: [Pdns-users] Recursion issue--SERVFAIL then NOERROR totally at random Well, as long as one server works you should get an answer. Try setting

Re: [Pdns-users] Recursion issue--SERVFAIL then NOERROR totally at random

2014-09-09 Thread bert hubert
On Tue, Sep 09, 2014 at 05:57:08PM +, Todd Smith wrote: Actually that begs one more question--as of right now I actually have network-timeout set to 5000 in recursor.conf, yet obviously it's still timing out considerably sooner than that; is there, say, some other setting (that is, of

Re: [Pdns-users] Recursion issue--SERVFAIL then NOERROR totally at random

2014-09-09 Thread bert hubert
On Tue, Sep 09, 2014 at 08:20:48PM +0200, bert hubert wrote: On Tue, Sep 09, 2014 at 05:57:08PM +, Todd Smith wrote: Actually that begs one more question--as of right now I actually have network-timeout set to 5000 in recursor.conf, yet obviously it's still timing out considerably

[Pdns-users] PowerDNS Recursor Security Release 3.6.1

2014-09-10 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, We regret that we have to announce a PowerDNS Recursor security release: Issue: A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely CVE:CVE-2014-3614 Affected: All deployments of PowerDNS

[Pdns-users] Fedora pdns-recursor updates

2014-09-10 Thread bert hubert
Hi everybody, We've just received word from Fedora that they have updates available (thanks!). In addition, they ask for testers. It would be great if you could help! The relevant links can all be found below: From: Morten Stevens Subject: Fedora pdns-recursor updates Hello, Here are our

[Pdns-users] Please test: ALIAS/ANAME apex record in PowerDNS

2014-09-21 Thread bert hubert
Hi everybody, Based on strong user interest, we are fast-tracking the implementation of ALIAS/ANAME records, to solve the 'CNAME at apex' problem. Because of the fast-tracking, we need rapid feedback to see if we got it right (see the end of the mail for details). In short, you can CNAME

Re: [Pdns-users] PDNS Authoritative server 2.9.22 on SLES V11?

2014-09-22 Thread bert hubert
On Thu, Sep 18, 2014 at 06:13:15PM -0400, p...@w3eta.net wrote: I manage a few PDNS v2.9.22 authoritative servers on SLES V10 and wee need to upgrade the OS to SLES V11. We would prefer not to upgrade PDNS. We can only recommend that you do. 2.9.22 has known security issues, please see

Re: [Pdns-users] PowerDNS Authoritative Server 3.4.0 released

2014-09-30 Thread bert hubert
Hi everybody, As an aside to these giant impressive release notes, I would like to thank the PowerDNS open source community for the tremendous amount of work invested in 3.4.0. It is astounding. For a small overview, check for example: https://github.com/PowerDNS/pdns/network/members

Re: [Pdns-users] PowerDNS Server 3.4.0 cron problem

2014-10-02 Thread bert hubert
On Thu, Oct 02, 2014 at 03:09:40PM +0200, Steffan Noord wrote: Hello, I have a strange problem. I have a php script that also signs the domains with dnssec. After upgrading top dns 3.4 the script is not signing the domains anymore When i run the script from the commandline it works fine.

Re: [Pdns-users] New recursor install, 50% timeout on first run

2014-10-13 Thread bert hubert
On Mon, Oct 13, 2014 at 10:10:43AM -0300, Ciro Iriarte wrote: Hi!, I'm running some quick tests on a new Recursor (3.6.1) and I see ~ 50% query timeouts. It has a good Internet connection but no clients yet, can this be caused by empty cache?. Yes, on a cold cache, nameservers are a lot

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread bert hubert
On Mon, Oct 20, 2014 at 01:12:07PM -0500, k...@rice.edu wrote: Also, I thought about adding some helpful LUA bits to report date/time or the client's IP address, but from what I understood, only one LUA script can be added to the recursor, maybe a super monster script could be able to

[Pdns-users] New: PowerDNS Security Status Polling

2014-10-22 Thread bert hubert
Hi everybody, PowerDNS software sadly sometimes has critical security bugs. Even though we send out notifications of these via all channels available, our recent security releases have taught us that not everybody actually finds out about important security updates via our mailing lists, Facebook

[Pdns-users] iphop.info attack today, iptables advice

2014-11-17 Thread bert hubert
developed a similar rule for FreeBSD, please share! Kind regards, Bert Hubert PowerDNS -- PowerDNS Website: http://www.powerdns.com/ Contact us by phone on +31-15-7850372 ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http

[Pdns-users] Documentation makeover, tickets and patches welcome!

2014-11-26 Thread bert hubert
Hi everybody, Thanks to the help of official PowerDNS-hero Pieter Lexis, our old DocBook XML-based documentation has been converted to some pretty good looking Markdown! You can check it out on http://doc.powerdns.com/ The old documentation is also still online, but the most popular parts have

[Pdns-users] Interoperability problem between Microsoft Azure DNS and Exchange and PowerDNS Recursor and IPv6 + solution

2014-12-03 Thread bert hubert
Hi everybody, Yesterday we worked with various providers to debug a problem between Microsoft Exchange, PowerDNS Recursor and the Microsoft Azure nameservers. If you or your users employ Microsoft Exchange on IPv6 and see email delivery problems to domain names hosted on Azure, this message is

Re: [Pdns-users] Still having DNSSEC validation problems with 3.4.1

2014-12-06 Thread bert hubert
On Fri, Dec 05, 2014 at 10:55:36AM -0500, Craig Despeaux wrote: Dec 05 10:44:47 unbound[26907:7] info: validation failure net. ANY IN: signature crypto failed from 192.168.0.7 Can you reproduce without 'ANY'? So only A records or SOA records etc. Am I missing a step or is PowerDNS broken?

[Pdns-users] Workaround for PowerDNS Security Advisory 2014-02

2014-12-09 Thread bert hubert
Hi everybody, From PowerDNS users we have heard of problems caused by various domain names related to PowerDNS Security Advisory 2014-02 (CVE-2014-8601), http://doc.powerdns.com/md/security/powerdns-advisory-2014-02/ If you are not yet in a position to upgrade to 3.6.2, or even if you have

Re: [Pdns-users] Workaround for PowerDNS Security Advisory 2014-02

2014-12-10 Thread bert hubert
+0100, bert hubert wrote: Hi everybody, From PowerDNS users we have heard of problems caused by various domain names related to PowerDNS Security Advisory 2014-02 (CVE-2014-8601), http://doc.powerdns.com/md/security/powerdns-advisory-2014-02/ If you are not yet in a position to upgrade

[Pdns-users] PowerDNS (Public) Graphing as a Service

2014-12-11 Thread bert hubert
Hi everybody, (this message is also on http://blog.powerdns.com/2014/12/11/powerdns-graphing-as-a-service/ with pictures and links) Over the past few months, we’ve worked on our graphing tool, which has proved to be a wonderful aid in debugging. If you want to get the best help from us in

Re: [Pdns-users] High CPU load with no traffic

2014-12-15 Thread bert hubert
On Mon, Dec 15, 2014 at 01:14:41PM -0300, Ciro Iriarte wrote: Hi!, I'm deplaying some recursors with 3.6.2 (packaged by EPEL) and they randomly use a lot of CPU and the queries dy by timeout. I've seen loads from 1 to 5 (100% and 500% CPU usage). Hi Ciro. We've not heard of anything like this.

Re: [Pdns-users] Workaround for PowerDNS Security Advisory 2014-02

2014-12-18 Thread bert hubert
On Fri, Dec 12, 2014 at 09:23:16AM +0100, sth...@nethelp.no wrote: You can update auth-zones using 'rec_control reload-zones' at runtime without restarting the recursor, which will discover new zones to be blocked or no no longer blocked. A couple of questions regarding reload-zones: Hi

[Pdns-users] PowerDNS Recursor 3.7.0-RC1 available

2015-01-22 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, We're very pleased to announce the availability of the first release candidate of PowerDNS Recursor 3.7.0. Of note is the massive community contribution, mostly over Christmas. Especially Ruben Kerkhof, Pieter Lexis, Kees Monshouwer

Re: [Pdns-users] wildcard proof failed dnssec

2015-02-02 Thread bert hubert
/#rules-for-filling-out-fields-in-database-backends Good luck! Bert -Oorspronkelijk bericht- Van: bert hubert [mailto:bert.hub...@powerdns.com] Verzonden: vrijdag 30 januari 2015 12:05 Aan: Steffan Noord CC: pdns-users@mailman.powerdns.com Onderwerp: Re: [Pdns-users

[Pdns-users] Introducing 3.7.0 blogpost + PowerDNS Recursor 3.7.0-RC2 available

2015-02-04 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, We're pleased to announce the second release candidate for 3.7.0. RC1 has seen a lot of production use already, which uncovered a small number of issues which have been addressed in RC2. We are very grateful for the people that test our

[Pdns-users] PowerDNS Authoritative Server 3.4.2 Released

2015-02-03 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Warning: Version 3.4.2 of the PowerDNS Authoritative Server is a major upgrade if you are coming from 2.9.x. Additionally, if you are coming from any 3.x version (including 3.3.1), there is a mandatory SQL schema upgrade. Please refer to the Upgrade

Re: [Pdns-users] metronome

2015-01-19 Thread bert hubert
On Sat, Jan 17, 2015 at 05:39:30AM +0200, Keresztes Péter-Zoltán wrote: Hello, I am trying to install metronome on a debian wheezy, fist I got the errors described in the first messge then I have installed libboost-dev when I run the make I get the following output: Hi Keresztes, Try: cd

Re: [Pdns-users] pdns server fails every morning when it starts getting used.

2015-01-19 Thread bert hubert
On Mon, Jan 19, 2015 at 02:31:20PM +1100, Peter Nunn wrote: Hi Guys, I'm still getting these lockups on the pdns setup. I'm having to restart the server every morning at about the same time the first user hits it in anger and then it seems to run for the rest of the day happily (with a

Re: [Pdns-users] iputils not available, but LUA support is.

2015-01-19 Thread bert hubert
On Mon, Jan 19, 2015 at 11:17:30AM -0700, Doug Preston wrote: I've used both a precompiled rpm and built the recursor from source (version 3.6.2). Hi Doug, iputils is only available from 'git' versions, not yet in any released version. Is there something in addition to LUA=1 to enable the

Re: [Pdns-users] metronome

2015-01-19 Thread bert hubert
you confirm you needed doxygen for the sequence described below? Or did you also run 'make' in the yahttp directory? Thanks. Bert On Jan 19, 2015, at 9:43 PM, bert hubert bert.hub...@powerdns.com wrote: On Sat, Jan 17, 2015 at 05:39:30AM +0200, Keresztes Péter-Zoltán

Re: [Pdns-users] High latency on recursion without cache

2015-01-19 Thread bert hubert
On Fri, Jan 16, 2015 at 01:34:45PM -0300, Ciro Iriarte wrote: This were the queries sent from a client: 2015-01-16 13:04:38 dig @server 3.redhat.pool.ntp.org -- NXDOMAIN, my mistake 2015-01-16 13:15:35 dig @server 2.redhat.pool.ntp.org -- NXDOMAIN, my mistake 2015-01-16 13:15:52 dig

Re: [Pdns-users] High latency on recursion without cache

2015-01-15 Thread bert hubert
On Thu, Jan 15, 2015 at 09:56:52AM -0300, Ciro Iriarte wrote: Hi!, can anybody share what's the usual latency you're seeing with uncached queries?. No, that is not usual. Please reproduce with --trace output and share it with us. Usually timeouts are involved. On a production system, try

[Pdns-users] We need your help getting back powerdns.org

2015-01-21 Thread bert hubert
Hi everybody, Many many years ago we let our domain powerdns.org lapse, which was really stupid. We did not use it at the time, but we'd like to do so again to host some more community related things. PowerDNS.ORG is now owned by Archeo, a Marchex company. We've previously attempted to contact

Re: [Pdns-users] dns problem

2015-02-16 Thread bert hubert
On Mon, Feb 16, 2015 at 05:04:51PM +0100, Steffan Noord wrote: I have a domein with no www record Can you run: pdnssec rectify-zone verbaasdonline.nl pdnssec check-zone verbaasdonline.nl ? This is probably a DNSSEC issue. Bert The domain has a *. verbaasdonline.nl record

[Pdns-users] New PowerDNS employee, the importance of testing RCs, skipping 3.7.0, World Hosting Days 2015

2015-02-12 Thread bert hubert
Hi everybody, Some assorted remarks PowerDNS news: 1) New employee 2) Please test our release candidates 3) 3.7.0 has been skipped, all hail 3.7.1 4) World Hosting days in Germany New employee To start with, the great news is that on March 2nd,

Re: [Pdns-users] Windows 7 computers not getting split horizon change made by Lua script

2015-02-19 Thread bert hubert
On Thu, Feb 19, 2015 at 03:26:42PM +0100, h...@nitramlexa.com wrote: It works like a dream for everybody BUT Windows 7. Android, Linux and Windows XP all get the LAN address when asking for mail.example.com, but Windows 7 gets the public address. Check with tcpdump what answers you are really

Re: [Pdns-users] cnames

2015-02-17 Thread bert hubert
On Tue, Feb 17, 2015 at 09:11:44AM +0100, Steffan Noord wrote: Yes cnames are eval But some clients want to use them. After checking my dns server i see a error [Error] CNAME cmsetup.nl found, but other records with same label exist. The client has a cname www. cmsetup.nl and a cname

Re: [Pdns-users] cnames

2015-02-17 Thread bert hubert
:17:39AM +0100, Steffan Noord wrote: So the soa needs tob e removed ? -Oorspronkelijk bericht- Van: bert hubert [mailto:bert.hub...@powerdns.com] Verzonden: dinsdag 17 februari 2015 9:16 Aan: Steffan Noord CC: 'Pdns' Onderwerp: Re: [Pdns-users] cnames On Tue, Feb 17, 2015

Re: [Pdns-users] LUA iputils netmaskgroup match

2015-02-20 Thread bert hubert
On Thu, Feb 19, 2015 at 05:40:47PM +0100, Niels Peen wrote: Hello, I’m using a netmaskgroup to see if a given IP matches: if nmg:match(ca) then .. This works very well but I would like to know which specific netmask matched. E.g. by having :match (also) return the matching netmask

Re: [Pdns-users] Any status on DNSSEC in Recursor?

2015-02-20 Thread bert hubert
Hi Charles, The status is that it is happening, and it should soon become more visible. The start of this is described in our post from this morning: http://mailman.powerdns.com/pipermail/pdns-dev/2015-February/001481.html Please join us in testing 4.x as it will be appearing! Bert

Re: [Pdns-users] High latency on recursion without cache

2015-01-27 Thread bert hubert
On Sun, Jan 25, 2015 at 10:33:34AM -0300, Ciro Iriarte wrote: Also, the test traffic was stopped, so the trace file should be complete and cleaner!. Ciro, I don't see anything that is wrong here. From a cold cache, it takes 11 queries to resolve 2.centos.pool.ntp.org. Your network used up the

Re: [Pdns-users] Returning NXDOMAIN from remote backend?

2015-01-28 Thread bert hubert
On Wed, Jan 28, 2015 at 08:57:52AM +0100, Nagy, Attila wrote: Maybe I've just overlooked something, but what JSON is needed for an NXDOMAIN reply in the remote backend? Hi Nagy, To generate an NXDOMAIN: 1) return that there are no records matching the request. 2) if PowerDNS asks for ANY or

[Pdns-users] PowerDNS products not vulnerable to CVE-2015-0235

2015-01-27 Thread bert hubert
Hi everyone, A brief note for you, your auditors other folks worrying about security: PowerDNS products are note vulnerable to CVE-2015-0235. Our single use of gethostbyname() has been audited to be no risk as the parameter with which it is called is static (gethostbyname(a.root-servers.net)).

Re: [Pdns-users] pdns server fails every morning when it starts getting used.

2015-01-08 Thread bert hubert
On Thu, Jan 08, 2015 at 09:17:38AM +1100, Peter Nunn wrote: I've got a pdns server at one site that is causing me massive headaches. Every morning when the staff come in and start using it (and were not talking large numbers) it fails to serve external dns and has to be restarted (usually)

[Pdns-users] World Hosting Days Private graphs

2015-03-17 Thread bert hubert
Hi everybody, Two announcements in one: First, like 7000 others, we'll be visiting World Hosting Days in Rust, Germany next week. Peter, Pieter and I will be there, as will be two of our wonderful Certified Consultants (Kees Monshouwer and Christian Hofstaedtler). If you want to meet up, please

[Pdns-users] Introducing dnsdist: DNS, abuse- and DoS-aware query distribution for optimal performance

2015-03-11 Thread bert hubert
Hi everybody, We just posted the following on our blog: http://blog.powerdns.com/2015/03/11/introducing-dnsdist-dns-abuse-and-dos-aware-query-distribution-for-optimal-performance/ Summary: Introducing dnsdist: DNS, abuse- and DoS-aware query distribution for optimal performance Over the years,

[Pdns-users] Standardized DNS Record Types Not Supported by PowerDNS

2015-03-09 Thread bert hubert
Sounds like the Supported Record Types page needs updating to add KX and IPSECKEY. Patches are welcome. It is very easy to update our Markdown documentation these days. https://github.com/PowerDNS/pdns/blob/master/docs/markdown/types.md and press the edit (pencil) icon. To bad about

[Pdns-users] Important PowerDNS announcement: merging with Open-Xchange!

2015-03-24 Thread bert hubert
Hi everybody, We’re currently at World Hosting Days[1] in Rust Germany, where we just announced that PowerDNS will be joining the Open-Xchange family of companies. Last week it was also announced[2] that the famous Dovecot IMAP server project is now a part of OX[3] too. We’ve been working with

Re: [Pdns-users] PowerDNS core dumps on FreeBSD 10.1 in a Jail when master=yes

2015-03-26 Thread bert hubert
Hi, The story here is: Mar 26 13:10:35 Exiting because communicator thread died with STL error: Creating local resolver socket for ::, does your OS miss IPv6?: Bad file descriptor PowerDNS can’t generate an IPv6 socket. You can probably solve that by setting: query-local-address6= In the

Re: [Pdns-users] PowerDNS Authoritative Server 3.4.3 released

2015-03-02 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, With this message, I'd like to congratulate our newest employee Pieter for doing a PowerDNS release on his first day of work! Even though the trains failed massively this morning in The Netherlands, it all worked out. Welcome to the

Re: [Pdns-users] AXFR Crashses

2015-02-27 Thread bert hubert
On Fri, Feb 27, 2015 at 02:15:12PM -0800, Mark Moseley wrote: We don't do a lot (or practically any) AXFRs, so I hadn't noticed this before now. Hi Mark, You probably have something in the database that upsets us (which should not happen of course). Can you run pdnssec check-zone on

Re: [Pdns-users] Configure private subdomain

2015-03-03 Thread bert hubert
On Tue, Mar 03, 2015 at 01:31:21PM +0200, Nikolaos Milas wrote: We are using pdns-2.9.22 with LDAP backend, using the Simple LDAP architecture. (...) internal.example.com and to not send AXFRs to the other master servers, as specified in nSRecord attribute, for this particular subdomain.

[Pdns-users] PowerDNS development plans: 4.x DNSSEC, C++ 2011!

2015-02-23 Thread bert hubert
In this post, we’d like to share our current plans for .. PowerDNS 4.x! We shared this first with the PowerDNS-development community, and after we gathered feedback, we’re now announcing it more broadly. The tl;dr: For the next few months we will be spring cleaning git master, and stable code

Re: [Pdns-users] Reply-To Change?

2015-02-23 Thread bert hubert
On Mon, Feb 23, 2015 at 12:48:49PM -0600, Nicholas Williams wrote: This frequently trips me up a lot, and I end up replying directly to people and not sending to the list. I don't see any good reason for not having a list reply-to. Also, IIRC, the list software PowerDNS is using supports

Re: [Pdns-users] DNS names and strings (was: PowerDNS development plans: 4.x DNSSEC, C++ 2011!)

2015-02-23 Thread bert hubert
On Mon, Feb 23, 2015 at 12:44:54PM -0600, Nicholas Williams wrote: I'm also very interested in finding out more about the change around ASCII names. I can recommend our ever growing set of test cases: https://github.com/ahupowerdns/pdns/blob/dnsname/pdns/test-dnsname_cc.cc DNS, surprisingly,

Re: [Pdns-users] How to add master zone through PowerDNS API?

2015-02-26 Thread bert hubert
On Thu, Feb 26, 2015 at 07:41:04PM +0100, Melvin Mughal wrote: I can't find any good reference on how to do this through the PowerDNS API. I want to post it a domain from the application via an API call and request to make a new master zone file for the domain with the zone template. Hi

Re: [Pdns-users] Important PowerDNS announcement: merging with Open-Xchange!

2015-03-28 Thread bert hubert
://www.theregister.co.uk/2015/03/24/open_xchange_skype_dovecot_merger/?page=2 The thing is, PowerDNS may power 40 - 50 per cent of all the domain names out there – per principal author Bert Hubert – but the company has until now had a grand total of two staff members. It's impressive that they've

Re: [Pdns-users] wildcard proof failed dnssec

2015-01-30 Thread bert hubert
On Fri, Jan 30, 2015 at 11:59:55AM +0100, Steffan Noord wrote: I have a domein with *.domein in a A record After that sidn is sending me reports that wildcard proof failed Please tell us which PowerDNS version you use and the name of the domain name so we can check. Thanks! Bert

Re: [Pdns-users] wildcard proof failed dnssec

2015-01-30 Thread bert hubert
Hi Steffan, Could you run: pdnssec rectify-zone startmetplate.nl Could you show us: select * from records where domain_id = (select id from domains where name='startmetplate.nl') ? thanks! Bert On Fri, Jan 30, 2015 at 12:04:48PM +0100, bert hubert wrote: On Fri, Jan 30, 2015 at 11

[Pdns-users] job alert: sales engineers and technical staff Japan

2015-04-20 Thread bert hubert
Hi everybody, Open-Xchange, Dovecot and PowerDNS are expanding in Japan. Therefore we are looking for Sales Engineers and Technical Staff. Ability to work and function in Japan is of course required for these jobs. If you are interested in joining our team, please contact me! Bert

[Pdns-users] First use of the PowerDNS 'upgrade now' system today

2015-04-24 Thread bert hubert
Hi everybody, In response to the security releases we did yesterday, we've activated the built-in PowerDNS 'upgrade now' system for the first time, and we have a question for you. This system is described in http://blog.powerdns.com/2014/10/22/powerdns-security-status-polling/ and documented on

Re: [Pdns-users] DNSSEC, pdns-recursor and libunbound

2015-04-24 Thread bert hubert
On Fri, Apr 24, 2015 at 11:07:46PM +0200, l...@consolejunkie.net wrote: The answer I got was: The validation is in comparison the easy part, changing the recursor to return the DNSSEC-information is more work. We're on it people!

[Pdns-users] PowerDNS 4.x development: PowerDNS git master is now 4.x C++ 2011 only!

2015-04-29 Thread bert hubert
Hi everybody! As we had announced back in February in http://mailman.powerdns.com/pipermail/pdns-dev/2015-February/001481.html we have moved the main git repository ('master') of PowerDNS over to PowerDNS 4.x development. This means that if you track the git master, and do a pull, you'll now

[Pdns-users] PowerDNS Autoritative Server 2.9.22 issues

2015-04-27 Thread bert hubert
Hi everybody, We've recently been contacted regarding issues people are having with PowerDNS 2.9.22.x. While we are sympathetic, and seeing if we can do a workaround with configuration statements or judicious use of 'dnsdist' (see http://dnsdist.org), please be aware that we will not issue any

Re: [Pdns-users] Records going missing in 3.4.4

2015-05-01 Thread bert hubert
On Fri, May 01, 2015 at 11:13:22AM -0700, Mark Moseley wrote: Of all the things I cleaned up, one thing I *didn't* clean up a lot of records with trailing dots in the content field (for NS/MX/CNAME records). This could easily confuse things. If PowerDNS chases a CNAME and it encounters a

Re: [Pdns-users] PowerDNS recursor on multi-core machine

2015-05-06 Thread bert hubert
On Wed, May 06, 2015 at 03:00:57PM +0700, Vu Le wrote: Does 8-core limitation still apply for recent version of pdns-recursor? If the answer is yes, what is the best way to fully utilize all cores on a 20-core machine. I guest I will have to use multiple instance? Hi Vu Le, It really depends

Re: [Pdns-users] DNS-OARC livestream with PowerDNS

2015-05-11 Thread bert hubert
://blog.powerdns.com/2015/05/11/dns-oarc-spring-workshop-2015/ Bert On Sun, May 10, 2015 at 11:14:46AM +0200, Peter van Dijk wrote: Hello, On 10 May 2015, at 9:17, bert hubert wrote: Hi everybody, This afternoon, in around 5 hours, we will present dnsdist at DNS-OARC. You can follow

Re: [Pdns-users] Issue with mydns backend?

2015-05-08 Thread bert hubert
On Fri, May 08, 2015 at 05:18:06PM -0400, Steve Young wrote: Hi, I've built pdns with the following options: ./configure --with-modules=bind gmysql mydns --without-lua Try: ./configure --with-modules=bind gmysql mydns --without-lua With the quotes. Good luck! Bert and the

[Pdns-users] DNS-OARC livestream with PowerDNS

2015-05-10 Thread bert hubert
Hi everybody, This afternoon, in around 5 hours, we will present dnsdist at DNS-OARC. You can follow the livestream here: https://plus.google.com/events/c05u02q7bjd4glm2g505pm0t3fs We're up on 16:00 Amsterdam time. Details about our presentation, including PDF, are on

Re: [Pdns-users] PowerDNS Recursor on multiple IPs within one machine

2015-05-12 Thread bert hubert
On Sat, May 09, 2015 at 06:01:40AM -0700, Anton wrote: I am testing PowerDNS Recursor with adns resolver. It has adnshost command to check A records. Hi Anton, I don't entirely understand your question. If you do benchmarking tests, by all means use a recent version of PowerDNS, check your

Re: [Pdns-users] pdns stopped working after update from 3.4.1 to 3.4.4

2015-05-15 Thread bert hubert
Arnaud, It is probably attempting to read the gsqlite3 module from 3.4.1 into 3.4.4. Double check if the modules for 3.4.4 are installed and where 3.4.4 is looking for them! Bert On Fri, May 15, 2015 at 03:36:04PM +0200, Arnaud Meyer wrote: Hi, I'm using pdns with sqlite3 on debian

Re: [Pdns-users] DH and SSL Problems

2015-05-21 Thread bert hubert
Dean, I think you ended up on the wrong mailing list! Sadly DNS does not employ any DH exchanges right now.. Bert It seems there is some issue with DH. Details are available in the usual places. This website is getting posted around the place. Perhaps someone can send in exim

Re: [Pdns-users] dnsdist build error : dnsdist.cc:868:22: error: use of undeclared identifier 'rl_abort'

2015-06-09 Thread bert hubert
On Mon, Jun 08, 2015 at 09:34:07PM -0700, indranil.db wrote: I am trying to build tarball from http://buildmaster1.test.powerdns.plexis.eu/#/builders/7 Please specify what operating system, compiler version etc. https://www.powerdns.com/mailing-lists.html has a list of things we need to know

[Pdns-users] New documentation on PowerDNS backends, and what they are and aren't

2015-06-23 Thread bert hubert
Hi everybody, We just posted this on our blog http://blog.powerdns.com/2015/06/23/what-is-a-powerdns-backend-and-how-do-i-make-it-send-an-nxdomain/ PowerDNS is a dynamic nameserver, with a ton of backends. If the supplied backends aren’t flexible enough, our architecture enable operators to

[Pdns-users] First draft of roadmap 4.0

2015-06-17 Thread bert hubert
Hi everybody, Some weeks ago we asked you for your input on our roadmap, and you sure delivered! We got dozens of comments, many of which resulted in additions to the roadmap, or the moving around of features. Thank you! Here is the provisional plan for 4.0. Before you read on, we'd like to

[Pdns-users] PowerDNS needs your help: what are we missing?

2015-05-25 Thread bert hubert
Hi everybody, As we're working on PowerDNS 4.x, we are wondering: what are we missing? The somewhat longer story is that as a software developer, a sort of feature-blindness appears. We try to make the software better, faster etc, but by focusing so much on the technology, one can lose sight of

[Pdns-users] dnsdist too! Re: PowerDNS needs your help: what are we missing?

2015-05-26 Thread bert hubert
/ and http://dnsdist.org/ A version of the email below with clickable links is on http://blog.powerdns.com/2015/05/26/powerdns-needs-your-help-what-are-we-missing/ Thanks! Bert On Mon, May 25, 2015 at 02:34:38PM +0200, bert hubert wrote: Hi everybody, As we're working on PowerDNS 4.x

Re: [Pdns-users] Unable to bind to UDP socket to '0.0.0.0:53': Permission denied

2015-05-21 Thread bert hubert
On Thu, May 21, 2015 at 04:00:40PM +0530, sumit sharma wrote: Hi, I am using powerdns on RHEL6.4 . Inorder to use SO_REUSEPORT i upgraded the kernel to 3.9.11. I am using the configuration receiver-threads=4 reuseport=yes When i switch on the reuseport, i see the below error exactly

[Pdns-users] PowerDNS 2.x End of Life Statement

2015-05-22 Thread bert hubert
PowerDNS 2.x End of Life Statement 21st of May 2015 PowerDNS Authoritative Server 2.9.22 was released more than 6 years ago, in January 2009. Because of its immense and durable popularity, some patch releases have been provided, the last one of which (2.9.22.6) was made available over three

Re: [Pdns-users] Any plans for RPZ

2015-08-18 Thread bert hubert
We're getting loads of questions for RPZ support all of a sudden so something is likely to happen. Is there a specific service or feed that you need support for? Bert On Wed, Aug 12, 2015 at 07:25:07AM +, Søren Andersen wrote: Still no plans for RPZ support? :) /Søren

Re: [Pdns-users] pdf

2015-08-18 Thread bert hubert
On Tue, Aug 11, 2015 at 02:55:55PM -0300, Thiago Farina wrote: Is there a pdf version of docs.powerdns.com available? Not anymore, sorry! The new layout is a lot pretier, but we lost the ability to PDF it up easily. Bert ___ Pdns-users

Re: [Pdns-users] 5001 questions waiting for database attention. Limit is 5000, respawning

2015-08-19 Thread bert hubert
On Wed, Aug 19, 2015 at 09:29:26AM -0400, Stan Weatherby wrote: Hello, We are experiencing a very strange issue. Our PDNSD servers keep getting the error: 5001 questions waiting for database attention. Limit is 5000, respawning which is killing the answer side. Hi Stan, This can happen

Re: [Pdns-users] Intermittent SERVFAIL Response

2015-08-18 Thread bert hubert
On Tue, Aug 18, 2015 at 10:33:15AM -0400, Scott Hollenbeck wrote: I'm running PowerDNS Recursor 3.7.3 on a pair of Ubuntu 14.04.3 LTS servers. I'm getting intermittent SERVFAIL responses on both servers to queries for a particular name. Could someone please help me understand what might be

[Pdns-users] Use PowerDNS for APN/GRPS/3GPPP/LTE context? We need your help

2015-07-29 Thread bert hubert
Dear PowerDNS community, We're currently looking into several uses for PowerDNS in a mobile/telco environment, specifically for APN resolution and LTE details. If you use PowerDNS in this context, and would like to help PowerDNS, could you please contact powerdns.id...@powerdns.com? We have some

Re: [Pdns-users] Gargabe records on slave

2015-08-01 Thread bert hubert
On Sat, Aug 01, 2015 at 09:51:59PM +0200, Bjoern Franke wrote: Hi, we are running Powerdns 3.4.5-1 on 2 Debian Jessie systems. The master uses MySQL, the slave sqlite. After axfering one zone, the slave gets some garbage records: These are empty non terminal records, needed to generate

Re: [Pdns-users] pdns_recursor DNS access

2015-07-16 Thread bert hubert
On Thu, Jul 16, 2015 at 12:22:47PM +0200, a b wrote: nl1.dnsnode.net. ns1.pine.nl. xs.powerdns.com. xs.powerdns.com I am assuming is the security vulnerability phone home feature, but what are these other two hosts? Why is it phoning home to those? These are the .NL servers, the

[Pdns-users] PowerDNS at Open-Xchange summit in Berlin, October 8-9

2015-07-15 Thread bert hubert
Hi everybody! Since we are now happily part of Open-Xchange, together with our friends at Dovecot IMAPd, we will also be present at the Open-Xchange summit in Berlin, October 8-9 this year. This is a free event, and you are invited! Besides marketing presentations like 'The Power of DNS to

[Pdns-users] RPZ support, roadmap changes, New employee, movie, presentations

2015-10-29 Thread bert hubert
Hi everybody, Here's a bunch of announcements all in one message so we don't bother you too much. 1) We have a new employee! Please welcome Remi Gacogne, who will be developing and working on all things PowerDNS starting next week. Since we've become part of Open-Xchange, we've gained new users

Re: [Pdns-users] strange servfail

2015-10-29 Thread bert hubert
Hi Martin, You appear to have put domain names in the type field! The error messages say the type is example.example.com. Bert On Oct 29, 2015 17:10, Martin wrote: > > Hi, > > I have setup a simple MySQL backend for a domain with a few MX records, a > couple of A

Re: [Pdns-users] dnssec problems

2015-10-27 Thread bert hubert
Quick response from phone, try removing the GOST signature from parent zone, it might be confusing things. No one uses that normally. Bert On Oct 27, 2015 23:18, Curtis Maurand wrote: > > I set up pdnssec for a rather critical zone xyonet.com.  I then published the >

[Pdns-users] IXFR/RPZ support first version Re: RBL response and dead-end

2015-10-25 Thread bert hubert
Hi everybody, So we worked really hard on it last week and a half, and now we have the very first version of the PowerDNS Recursor that understands RPZ and can do incremental slaving of large RPZ zones over IXFR. Thanks go out to MX Tools and Spamhaus who, after John contacted them, gave us a

[Pdns-users] EDNS Client Subnet support in recursor

2015-11-13 Thread bert hubert
Hi everybody, We just merged EDNS Client Subnet support in the recursor. It works by setting edns-subnet-whitelist to a list of domain names or nameserver netmasks that should be getting EDNS Client Subnet queries. Eventually we may make this auto probing etc. This feature is available in the

Re: [Pdns-users] SERVFAIL pdns-recursor

2015-11-01 Thread bert hubert
On Sun, Nov 01, 2015 at 03:23:42PM +, Federico Olivieri wrote: > Hi guys! > Any suggestions/clue? It says 'timeouts', which suggests you might have issues reaching google. Please point your recursor to metronome as explained in

[Pdns-users] Technical Summit videos now also up

2015-11-06 Thread bert hubert
Hi everybody, With great help from the PowerDNS community the videos from the technical workshop last October in Berlin are now very watchable. This involved matching the separately recorded audio to the fish-eye distorted video from the GoPro, so many thanks to our anonymous helper! As

[Pdns-users] PowerDNS presentations and audio from Open-Xchange summit

2015-10-09 Thread bert hubert
Hi everybody! Yesterday and today we met many many PowerDNS users at the Open-Xchange summit here in Berlin. You can hear and see our presentations on: https://www.powerdns.com/oxsummit/ Peter, Pieter and I worked really hard on writing no less than 13 chapters of presentation covering:

[Pdns-users] New mailinglist for dnsdist

2015-08-27 Thread bert hubert
Hi everybody, dnsdist usage is increasing, and this tool is of interest to PowerDNS and non-PowerDNS users alike. We've therefore created a new mailing list dedicated to dnsdist. Please find it via http://mailman.powerdns.com/mailman/listinfo/dnsdist Hope to see you there! Bert

Re: [Pdns-users] AXFR chunk error: Server Not Authoritative for zone / Not Authorized

2015-08-30 Thread bert hubert
On Sun, Aug 30, 2015 at 02:10:28PM +0200, a b wrote: The superslave reports thus: pdns[1058]: Initiating transfer of '16.172.in-addr.arpa' from remote '172.16.2.4' pdns[1058]: Initiating transfer of 'dmz' from remote '172.16.2.4' pdns[1058]: Unable to AXFR zone '16.172.in-addr.arpa' from

[Pdns-users] Conferences, various

2015-09-09 Thread bert hubert
Hi everybody, We try not to bore you too much with announcements, so here is a bundle: * Tomorrow this Thursday I'll be at the 'security summit at the beach', https://www.ssatb.nl/ in The Hague. If you or any of your coworkers are there, please find me! * Next week on Wednesday September

<    2   3   4   5   6   7   8   9   >