Oops. Yes. Port 53 has a pdns-recursor listening on it, which is feeding requests to pdns. Want the recursor config too?
dig -p 5300 jrd.org soa @localhost ; <<>> DiG 9.16.22 <<>> -p 5300 jrd.org soa @localhost ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37408 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;jrd.org. IN SOA ;; ANSWER SECTION: jrd.org. 86400 IN SOA f3-kong-dyndns.jrd.org. postmaster.jrd.org. 2022010900 10800 3600 3600000 86400 ;; Query time: 10 msec ;; SERVER: ::1#5300(::1) ;; WHEN: Tue Jan 18 08:54:01 EST 2022 ;; MSG SIZE rcvd: 98 From: Brian Candler <b.cand...@pobox.com> Date: Tue, 18 Jan 2022 13:25:11 +0000 On 18/01/2022 12:19, jrd via Pdns-users wrote: root@f3-kong-dyndns /etc/powerdns # dig jrd.org soa @localhost ; <<>> DiG 9.16.22 <<>> jrd.org soa @localhost ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58908 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ... ;; Query time: 90 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) RD = recursion desired, RA = recursion available. Are you *sure* it's powerdns authoritative that you're talking to on localhost port 53?! Ah, digging through your config: > # local-port=53 > local-port=5300 Clearly, it isn't. Your dig query is going to something else (unspecified) which is listening on port 53. That'll be why you're not getting AA. _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users