Re: [Pdns-users] DNSSEC error

2023-08-18 Thread Martin Kellermann via Pdns-users
DNSSEC seems to be fine: https://dnsviz.net/d/uni-wh.de/dnssec/ https://dnssec-analyzer.verisignlabs.com/uni-wh.de Von: Pdns-users Im Auftrag von Huber, Peter via Pdns-users Gesendet: Freitag, 18. August 2023 11:13 An: All about using and deploying powerdns Cc: Huber, Peter Betreff: Re:

Re: [Pdns-users] servfail-packets>0 but no data in servfail-queries ring buffer

2020-04-16 Thread Martin Kellermann via Pdns-users
Hi Remi, >At a quick glance the only place in the code where we increase the >'servfail-packets' counter but do not add the offending query to the >'servfail-queries' ring-buffer is when we receive a query for a DNS name that >has an 8-bit byte in it and '8bit-dns' [1] is not set >(which is

[Pdns-users] servfail-packets>0 but no data in servfail-queries ring buffer

2020-04-09 Thread Martin Kellermann via Pdns-users
Hi, PowerDNS Auth Server 4.3.0 with PostgreSQL backend I'm facing the fact, that sometimes the servfail-packets counter increases and i would debug this and find the reason why PowerDNS sends out a "servfail" packet. Actually today the counter increased from 0 to 2 and i don't know why!

[Pdns-users] Debugging SERVFAIL

2019-03-12 Thread Martin Kellermann via Pdns-users
hi, pdns auth server 4.1.6 with postgresql backend i'm facing the fact, that from time to time the servfail-packets counter increases, and i don't know, why. https://doc.powerdns.com/authoritative/performance.html#servfail-packets tells me, that this is due to a database problem.

Re: [Pdns-users] PDNS/BIND Configuration

2019-02-18 Thread Martin Kellermann via Pdns-users
> … > The reason why we want PDNS(slave) to update BIND is that it has a GUI and we > will be making use of it to update records to BIND > There are tools for bind too. http://probind.org/about/ is one example, and NICTOOL should work with bind too. Maybe you want to try a bind GUI? Regards

Re: [Pdns-users] RRSIG expired?

2019-02-15 Thread Martin Kellermann via Pdns-users
>Hi Martin, > >On 2/14/19 2:17 PM, Martin Kellermann via Pdns-users wrote: >> I'm having exactly this same problem: >> https://mailman.powerdns.com/pipermail/pdns-users/2017-April/024791.html >> First attempts with DNSSEC and PowerDNS and the RRSIGs were running into

[Pdns-users] RRSIG expired?

2019-02-14 Thread Martin Kellermann via Pdns-users
Hi, I'm having exactly this same problem: https://mailman.powerdns.com/pipermail/pdns-users/2017-April/024791.html First attempts with DNSSEC and PowerDNS and the RRSIGs were running into "expired" state. Only difference ist that secondary NS are not under my control and run by ISP. I did a

[Pdns-users] servfail-packets>0 but no data in servfail-queries ring buffer

2019-02-07 Thread Martin Kellermann via Pdns-users
hi, pdns auth server 4.1.6 with postgresql backend i'm facing the fact, that today the servfail-packets counter increased from 0 to 1. https://doc.powerdns.com/authoritative/performance.html#servfail-packets tells me, that this is due to a database problem.

[Pdns-users] How to get data from Ring buffers from Authoritative Nameserver

2019-02-02 Thread Martin Kellermann via Pdns-users
hi, i want to get the ring-buffer data from PDNS server statistics: https://doc.powerdns.com/authoritative/performance.html#ring-buffers as documented, they can be viewed using the webserver, but i can't find how to do this. the webserver docs

Re: [Pdns-users] Statistics

2019-01-25 Thread Martin Kellermann via Pdns-users
>By reading the fine documentation, for example >https://doc.powerdns.com/authoritative/performance.html?highlight=metrics#metricnames >or https://doc.powerdns.com/recursor/metrics.html?highlight=metrics >or https://dnsdist.org/reference/config.html?highlight=stats#dumpStats > > Bert hi

Re: [Pdns-users] reverse zone /27 subnet - migrating from bind

2019-01-25 Thread Martin Kellermann via Pdns-users
>> You cant ask your dns directly, it only knows about the zone >> 118-31.82.119.85.in-addr.arpa. >> So you would need do do: >> >> dig 118.18-31.82.119.85.in-addr.arpa ptr @dnsip >> >> to get a correct result you have to ask the dns at the provider and there >> you get back a cname pointing to

Re: [Pdns-users] reverse zone /27 subnet - migrating from bind

2019-01-25 Thread Martin Kellermann via Pdns-users
hi Andy, >By way of example, I (in the ISP role) delegate 85.119.82.118/32 to >an end user by putting the equivalent of: > >118-32 NS ns1.abominable.org.uk. >118-32 NS ns2.abominable.org.uk. >118 CNAME 118.118-32.82.119.85.in-addr.arpa. > >into the zone 82.119.85.in-addr.arpa.

[Pdns-users] reverse zone /27 subnet - migrating from bind

2019-01-24 Thread Martin Kellermann via Pdns-users
hi, we're migrating from bind to powerdns and get confused about how to setup reverse delegation correctly, since subnets smaller /24 seems not to work out oft he box. example: our ISP delegates the subnet 10.10.10.192/27 to our server as primary NS. what ist he correct way to setup this