Re: [Pdns-users] Pdns Remote vs Pipe backend performance

2013-03-06 Thread bert hubert
On Wed, Mar 06, 2013 at 05:42:54PM +0200, Aleksey Chudov wrote: On 06.03.2013 16:22, Aki Tuomi wrote: Could you please open a ticket about the patch above so we could get it included in to powerdns, it looks really useful to me. +1 Aki Ticket opened http://wiki.powerdns.com/trac/ticket/714

Re: [Pdns-users] personal login for wiki.powerdns.com

2013-02-27 Thread bert hubert
I'll mail you shortly, was a bit busy, sorry. Bert On Wed, Feb 27, 2013 at 01:28:19PM +0400, Nikolay Shaplov wrote: Is it possible to get personal login for wiki.powerdns.com ? It is quite not comfortable to track statuses and replies for the tickets made by anon user. Can

Re: [Pdns-users] recursor v. 3.3.1

2013-01-16 Thread bert hubert
On Wed, Jan 16, 2013 at 02:23:48PM +0300, Hawara wrote: Why recursor version 3.3.1 was never released? Are there plans to officially release it, or to release 3.4 ? Hi 'Hawara', We made a version we were ready to release but it turned out to have issues. To avoid any confusion, the next

[Pdns-users] PowerDNS Authoritative Server 3.2-RC3 released!

2012-12-23 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, Release Candidate 3 of the PowerDNS Authoritative Server 3.2 is available from: http://powerdnssec.org/downloads/pdns-3.2-rc3.tar.gz http://powerdnssec.org/downloads/packages/pdns-static-3.2rc3-1.i386.rpm

Re: [Pdns-users] Ignoring wildcard due to TXT record

2012-12-13 Thread bert hubert
On Thu, Dec 13, 2012 at 12:46:12PM +0100, Marten Lehmann wrote: Hello, after our migration from PowerDNS 2.9.21 to 3.1 we just noticed another unexpected behaviour. If a TXT record for a subdomain is defined, a wildcard at the same subdomain level is ignored. This is correct DNS behaviour.

Re: [Pdns-users] Question about Query Cache

2012-12-12 Thread bert hubert
On Wed, Dec 12, 2012 at 10:58:20AM -0800, George Fawcett wrote: Hello pdns-users, I have a question about the query cache, does the query cache take in account the the requesting resolvers IP in the cache ? So that it caches the result for that particular resolver ? Meaning more of the same

Re: [Pdns-users] Question about Query Cache

2012-12-12 Thread bert hubert
On Wed, Dec 12, 2012 at 11:06 AM, bert hubert bert.hub...@netherlabs.nlwrote: On Wed, Dec 12, 2012 at 10:58:20AM -0800, George Fawcett wrote: Hello pdns-users, I have a question about the query cache, does the query cache take in account the the requesting resolvers IP in the cache

Re: [Pdns-users] Google Community

2012-12-11 Thread bert hubert
On Tue, Dec 11, 2012 at 12:07:33AM -0800, Joerg Stephan wrote: i would like to see an Google Community of PowerDNS within Google Plus. Does someone will set it up, or ca i feel free to do so? Just opened it! https://plus.google.com/communities/109461275309357168312 We may in time do an

Re: [Pdns-users] Does PowerDNS plan to implement Response Policy Zone ( RPZ )?

2012-12-06 Thread bert hubert
On Dec 6, 2012, at 8:41 AM, Peter van Dijk wrote: Hello Augie, On Dec 4, 2012, at 23:16 , Augie Schwer wrote: Are there any plans to build RPZ support into PowerDNS? I googled around, and didn't see any discussion of RPZ outside of Bind, so I thought I'd ask. :) There are no

Re: [Pdns-users] pdns-recursor - try next working DNS server?

2012-12-03 Thread bert hubert
On Mon, Dec 03, 2012 at 11:36:25AM +0200, Bogdan Enache wrote: I see pdns-recursor isn't able to resolve that domain, it never tries the next working DNS. For BIND i see it's working, it's trying the next one. Bogdan, Please give us the domain name and we can look at it. PowerDNS does

Re: [Pdns-users] pdns-recursor - try next working DNS server?

2012-12-03 Thread bert hubert
On Mon, Dec 03, 2012 at 11:48:16AM +0200, Bogdan Enache wrote: Hi Bert, The domain is ktd.ro. It does not belong to me. Ok, it works here, not sure what to make of the issue. Sorry! Can you tcpump all four nameservers? Bert ___ Pdns-users

Re: [Pdns-users] 3.2-RC1! Re: PowerDNS Authoritative Server 3.1 Release Candidate 1 available

2012-11-21 Thread bert hubert
On Wed, Nov 21, 2012 at 03:32:04PM +0300, Odhiambo Washington wrote: Hello, I am trying to build pdns-3.2rc1 on FreeBSD 9.1 from source. Hi Odhiambo, --enable-recursor is not supported from the authoritative tarball. To build the recursor, download a recursor tarball. By accident it does

Re: [Pdns-users] filter-aaaa-on-v4 option (pdns-recursor)

2012-11-03 Thread bert hubert
On Sat, Nov 03, 2012 at 01:52:01PM +0400, Sergey wrote: Is there an option similar to filter--on-v4? (https://kb.isc.org/article/AA-00576/0/Filter--option-in-BIND-9-.html Sergey, No, right now there isn't. However, in PowerDNS Recursor you could do this with a four line Lua script in

Re: [Pdns-users] PowerDNS recursor - use of root server results

2012-11-01 Thread bert hubert
On Thu, Nov 01, 2012 at 11:28:20AM +, James Leavers wrote: Hi, Is it correct that the recursor will use the results from the root servers as opposed to the next level down, the gTLD servers? For instance: dig ns yahooapis.com on my PowerDNS recursor: Yes, for NS records and currently

Re: [Pdns-users] pdns server offline cache (ldap backend).

2012-10-22 Thread bert hubert
On Oct 22, 2012, at 8:10 PM, Daniel Lopes de Carvalho wrote: Hi. I'm using pdns with ldap backend and I would like to know if is possible to configure pdns to work with offline cache to prevent the pdns to crash when LDAP stop to work. Hi Daniel, PowerDNS relies on its backends. If the

Re: [Pdns-users] problem resolving completely with pdns-recursor-3.3.1

2012-10-12 Thread bert hubert
On Fri, Oct 12, 2012 at 09:30:50AM -0500, k...@rice.edu wrote: Dear PDNS community, Just to follow up. I went ahead and opened ticket #598 against pdns-recursor-3.3.1 for this matter. Seen it and looking in to it, thanks! Bert ___

Re: [Pdns-users] Notify all domains

2012-10-04 Thread bert hubert
On Thu, Oct 04, 2012 at 10:38:38AM +0200, azurIt wrote: I was trying to do this by calling 'pdns_control notify' for every domain but the whole PDNS server freezes after a while and needs to be killed. which version? Bert -- PowerDNS Website: http://www.powerdns.com/ PowerDNS

[Pdns-users] [bert.hub...@netherlabs.nl: [dns-operations] Go Daddy is down]

2012-09-10 Thread bert hubert
Hi everybody, If your resolver is failing to resolve around 5% of domains right now, it is not you, it is them. Godaddy is down. In our tests, they represent almost 5% of all popular domains. Just so you know! Bert - Forwarded message from bert hubert bert.hub...@netherlabs.nl

Re: [Pdns-users] [bert.hub...@netherlabs.nl: [dns-operations] Go Daddy is down]

2012-09-10 Thread bert hubert
On Mon, Sep 10, 2012 at 12:36:41PM -0700, Daniel L. Miller wrote: Is that automated PowerDNS Recursor bulk test available for use by others? Yes, you can observe it on

Re: [Pdns-users] FW: pdns_recursor and forward zones with autorative reply

2012-08-16 Thread bert hubert
Pavel, Sorry - we're a bit busy right now. However, can you try forward-zones-recurse? It may do what you want. Bert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] Issues compiling mydns backend on CentOS (EL5)

2012-08-06 Thread bert hubert
On Aug 6, 2012, at 8:11 PM, Cody wrote: Hello, I'm having quite the difficulty figuring out the issue. I attempted compiling the mydns module in the recent version of PDNS as well as the 3.0 branch without success. I've been attempting the build against the stock MySQL libraries in the

Re: [Pdns-users] Question regarding DNSSEC RRSIG

2012-08-05 Thread bert hubert
On Aug 5, 2012, at 1:08 PM, Nicky Gerritsen wrote: Dear all, I have deployed DNSSEC yesterday for my domains. First, my situation: I have a Windows Server 2008 primary name server and a PowerDNS 3.1 slave server. This slave runs on Ubuntu 12.04 and I have compiled it from source

Re: [Pdns-users] PowerDNS DNSSEC support

2012-07-12 Thread bert hubert
On Thu, Jul 12, 2012 at 07:16:00PM +0200, Jan-Piet Mens wrote: No, and it is as yet unknown if or when it will. OK: strike the *if*. :) We will be doing it, and with the same philosophy as for the auth implementation. We want to build a validating recursor that is good, simple and reliable

[Pdns-users] DNSSEC in PowerDNS Authoritative 3.0.x explicitly deprecated

2012-07-08 Thread bert hubert
. If upgrading to 3.1 is an issue for you, please report your problems and we'll work on fixing them. Kind regards, Bert Hubert -- PowerDNS Website: http://www.powerdns.com/ PowerDNS Community Website: http://wiki.powerdns.com/ PowerDNS is supported and developed by Netherlabs: http

[Pdns-users] Some initial large scale DNSSEC signing best practices

2012-07-07 Thread bert hubert
On Fri, Jul 06, 2012 at 11:21:26AM +0200, Peter Gervai wrote: I welcome this message but reminds me of mentioning that if there's a gathered wisdom about common pitfalls and usual possible improvements it may be useful to share these as most of us are not dutch root registrars. ;-) Yes - we

Re: [Pdns-users] Some initial large scale DNSSEC signing best practices

2012-07-07 Thread bert hubert
These best practices can now also be found ( edited) on http://wiki.powerdns.com/trac/wiki/LargeScaleDNSSECBCP Bert n Sat, Jul 07, 2012 at 07:36:10PM +0200, bert hubert wrote: On Fri, Jul 06, 2012 at 11:21:26AM +0200, Peter Gervai wrote: I welcome this message but reminds me

[Pdns-users] PowerDNS Free DNSSEC advice for SIDN (.nl) Registrars

2012-07-06 Thread bert hubert
from our offer of free advice assistance, please contact us on powerdns.supp...@netherlabs.nl. It should be clarified that this offer comes from PowerDNS, and is not a promise by SIDN! Kind regards, Bert Hubert (*) This is a 'best effort' offer, where we can't guarantee that we will be able

Re: [Pdns-users] pdns nproxy

2012-07-05 Thread bert hubert
On Jul 5, 2012, at 8:18 PM, Fred Wittekind wrote: Then I got this error when trying to start nproxy (IP address censored): nproxy: Fatal: Binding socket for incoming packets to 'a.b.c.d:53': Address already in use Which of course makes sense after seeing it, pdns is already binding to the

[Pdns-users] Further big PowerDNS DNSSEC rollouts

2012-07-03 Thread bert hubert
Without a lot of comment, as I don't want to steal SIDN's thunder, but today was an important day for DNSSEC in The Netherlands. The goods are on: http://xs.powerdns.com/dnssec-nl-graph/ (this is an unofficial graph based on public data) Some context for this graph can be found in the

Re: [Pdns-users] Powerdns stops slaving

2012-06-28 Thread bert hubert
these release notes have been written, we can confirm that this issue is fixed by that commit. Could you check if 3.1, which contains other worthwhile fixes, makes your problem go away? Thanks! -- Bert Hubert Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ On Jun 28, 2012

Re: [Pdns-users] PowerDNS at ICANN in Prague

2012-06-28 Thread bert hubert
-final-bert-hubert-icann-prague.pdf And if you want to, you can get the audio too, which might help make more sense of the presentation: http://xs.powerdns.com/icann-powerdns/powerdns-icann44-prague.mp3 Kind regards, Bert -- PowerDNS Website: http://www.powerdns.com/ PowerDNS Community Website

[Pdns-users] PowerDNS at ICANN in Prague

2012-06-21 Thread bert hubert
Hi everybody, Peter van Dijk and I will be representing PowerDNS at ICANN44 in Prague next week. As always, we enjoy meeting up with PowerDNS users! So if you'd like to join us for a beer (or whatever), please let us know. We will also be presenting on Wednesday in the DNSSEC track, details can

Re: [Pdns-users] Dynamically load auth-zones into the PowerDNS Recursor.

2012-06-05 Thread bert hubert
pdns_control reload-zones ? Supposed to do what you want ;-) On Jun 5, 2012, at 7:20 PM, Augie Schwer wrote: Is there a way to load auth-zones into the PowerDNS recursor without modifying the configuration file and restarting the daemon every time I want to add a new domain to the list?

Re: [Pdns-users] Support for GSS-TSIG Dynamic DNS Updates

2012-06-04 Thread bert hubert
On Mon, Jun 04, 2012 at 08:25:05AM +0200, Jan-Piet Mens wrote: Does PowerDNS support or will it support GSS-TSIG Secure Dynamic DNS Updates (proabably related: RFC 3645, 2930) for interoperability with dynamic Windoze clients? PowerDNS authoritative server currently has no support for RFC

[Pdns-users] DNSSEC introductory e-learning course online

2012-05-06 Thread bert hubert
Hi everybody, SIDN, the Dutch registry, has developed a DNSSEC e-learning course, which is now available on http://www.dnsseccourse.nl (English) and http://www.dnsseccursus.nl (Dutch). The course is freely available, and there is a test at the end too. The materials are aimed at people that need

Re: [Pdns-users] NSEC RR - pdns 2.9.22

2012-05-03 Thread bert hubert
On Thu, May 03, 2012 at 10:03:57AM +0200, Sven Broeske wrote: Okay, it seems that nobody can help me.. Then I'll try another approach. Does anyone already used a NSEC RR with pdns-server 2.9.21/2.9.22? Hi Sven, For DNSSEC operations, you need PowerDNS Authoritative Server 3.x. 2.9.x might

Re: [Pdns-users] SOA Slave Retrieval

2012-04-25 Thread bert hubert
On Wed, Apr 25, 2012 at 10:20:40PM +0200, Emiel van Berlo wrote: We are migrating to PowerDNS and I notice some strange behaviour when useing PowerDNS as a slave server. Good and bad ;-) Our primary bind server has this soa record : ns1.domain.tld. hostmaster.domain.tld. 2012010101 28800

Re: [Pdns-users] PDNS Error Message

2012-04-23 Thread bert hubert
On Mon, Apr 23, 2012 at 11:00:06AM +0200, Thorben Hemmler wrote: Hello List! I´ve got some entries in my error.log which I couldn´t evaluate: Apr 23 10:52:36 name1 pdns[1355]: TCP question accept error: Software caused connection abort Apr 23 10:52:40 name1 pdns[1355]:

Re: [Pdns-users] Solaris compilation problem - epoll()

2012-04-07 Thread bert hubert
On Fri, Apr 06, 2012 at 11:59:00PM +0200, Juraj Lutter wrote: On 04/06/2012 11:24 PM, bert hubert wrote: Hi Juraj, To build the Recursor on Solaris (or even on Linux for maximum performance), please first run dist-recursor and then cd into the generated pdns-recursor-3.x directory

Re: [Pdns-users] Solaris compilation problem - epoll()

2012-04-06 Thread bert hubert
On Fri, Apr 06, 2012 at 11:05:02PM +0200, Juraj Lutter wrote: when building with --enable-recursor, do not build epollmplexer as Solaris does not have epoll() API like Linux does. Please adjust configure script accordingly. Hi Juraj, To build the Recursor on Solaris (or even on Linux for

Re: [Pdns-users] TXT record with embedded tab causes thread to die.

2012-03-27 Thread bert hubert
On Tue, Mar 27, 2012 at 02:58:30PM -0400, Christopher Pruden wrote: Hi Ruben, Is the record that you show with a tab, or the '' sign? The issue I'm running into is with an embedded tab, it got mixed up a bit in the email. Hi Christopher, Together with Ruben we've diagnosed reproduced

Re: [Pdns-users] TXT record with embedded tab causes thread to die.

2012-03-27 Thread bert hubert
On Tue, Mar 27, 2012 at 05:29:03PM -0400, Christopher Pruden wrote: Thanks very much, I've downloaded and installed the pdns-static-3.1rc1.20120327.2539-1.x86_64.rpm package, and it looks like that took care of it. Great! I've got one record remaining that made it into PowerDNS via AXFR, but

Re: [Pdns-users] In lieu of a DNSSEC pdns-recursor what are folks using?

2012-03-03 Thread bert hubert
On Fri, Mar 02, 2012 at 03:14:10PM -0800, Augie Schwer wrote: In lieu of a DNSSEC enabled pdns-recursor what are folks using? Any suggestions? Unbound is the best right now! We enjoy working with the NLNetLabs people and we frequently benefit from each others DNSSEC knowledge. Bert --

Re: [Pdns-users] dnssec in pdns-recursor

2012-03-02 Thread bert hubert
On Wed, Feb 29, 2012 at 11:03:48AM -0800, Augie Schwer wrote: On Fri, May 20, 2011 at 11:52 PM, bert hubert bert.hub...@netherlabs.nl wrote: On Fri, May 20, 2011 at 03:31:35PM -0700, Alfred B. M. Cordero wrote: Does anyone know if the recursor can use dnssec? I don't find any information

Re: [Pdns-users] Data field in DNS should start with quote () at position 0 of

2012-02-20 Thread bert hubert
On Mon, Feb 20, 2012 at 11:28:43AM -0200, Fernando Morgenstern wrote: Hi, I recently upgraded to version 3.1 and noticed the following error in logs: Feb 20 16:19:51 ns0 pdns[1865]: Exception building answer packet (Parsing record content: Data field in DNS should start with quote () at

Re: [Pdns-users] PDNS-recursor: confusion with rec_control wip-cache

2012-02-20 Thread bert hubert
On Mon, Feb 20, 2012 at 08:18:16PM +0100, Peter Gervai wrote: On Mon, Feb 20, 2012 at 09:26, Christian Adler christian.ad...@mcs.de wrote: To PG: Yes, looks like the cache wasn't cleared until the recursor was restartet (but this is not an option on our systems). Any ideas how to fix this

Re: [Pdns-users] No RRSIG records after importing DNSSEC keys

2012-02-19 Thread bert hubert
On Sun, Feb 19, 2012 at 02:54:06AM -0800, Ask Bjørn Hansen wrote: Hi, I imported DNSSEC keys originally generated with bind into our powerdns database so we can use the much nicer operational toggles on that. Good to hear! The zone data is still hosted in bind, but then transferred

Re: [Pdns-users] No RRSIG records after importing DNSSEC keys

2012-02-19 Thread bert hubert
On Sun, Feb 19, 2012 at 10:51:31AM -0800, Ask Bjørn Hansen wrote: Good to hear! It's really nice how much effort you've put into making powerdns not just correct but also practical! We held out a long time before doing DNSSEC. When we did decide to do it, we wanted to do it *right* in

Re: [Pdns-users] Upgrading PDNS from 2.9 to 3.0- STL error: Creating local resolver socket for ::: Address family not supported by protocol

2012-02-16 Thread bert hubert
On Thu, Feb 16, 2012 at 05:45:59PM +0100, Peter Gervai wrote: On Thu, Feb 16, 2012 at 17:41, Dougan, Linda A douga...@gru.com wrote: “Communicator thread died because of STL error: Creating local resolver socket for ::: Address family not supported by protocol” Do you use IPv6? If not, try

Re: [Pdns-users] Upgrading PDNS from 2.9 to 3.0- Communicator thread died because of error: GSQLBackend unable to refresh domain_id 196: PostgreSQL failed to execute command: ERROR: Slony-I: Table dom

2012-02-16 Thread bert hubert
On Thu, Feb 16, 2012 at 02:38:33PM -0500, Dougan, Linda A wrote: I am upgrading from pdns 2.9 to 3.0.1. I was able to fix the previous STL error by adding query-local-address6= to pdns.conf as Bert suggested, thank you! Now DNS works on every other try but not every time. I have also

Re: [Pdns-users] NOTIFYs from dual stacked hosts

2012-02-08 Thread bert hubert
On Thu, Feb 09, 2012 at 06:48:54AM +, Andy Smith wrote: On the pdns servers, the NOTIFY is received on both IPv4 and IPv6 addresses (verified with tcpdump), however in the logs all that is seen is: pdns[13113]: Received NOTIFY for example.com from 2001:db8:1f1:f019::2 which is not

Re: [Pdns-users] pdns 3.1-pre pdns_control notify

2012-02-01 Thread bert hubert
On Mon, Jan 30, 2012 at 02:58:16PM +0100, GAVARRET, David wrote: Hello, For my reverse authoritative servers, I'm using the pdns 3.1-pre release with a combination of a gmysql backend plus a custom one (my custom backend answers with generic response when a specific PTR is not found in the

[Pdns-users] PowerDNS Security Advisory 2012-01: Denial of Service vulnerability in most versions of the PowerDNS Authoritative Server

2012-01-10 Thread bert hubert
to be processed anyhow. We would like to thank Ray Morris of BetterCGI.com for bringing this issue to our attention and Aki Tuomi for helping us reproduce the problem. Kind regards, Bert Hubert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http

[Pdns-users] updated Debian and RPM 3.0.1 packages for DNSSEC zone transfers

2012-01-10 Thread bert hubert
Apologies for the confusion. We will be expanding our regression tests to prevent this issue from recurring. Kind regards, Bert Hubert - -- PowerDNS Website: http://www.powerdns.com/ PowerDNS Community Website: http://wiki.powerdns.com/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux

Re: [Pdns-users] Recursion when Powerdns auth servers is SOA

2012-01-10 Thread bert hubert
On Jan 10, 2012, at 11:28 PM, Rory Toma wrote: I have a case where we are transitioning from a traditional (albeit hacked) bind server to powerdns auth server. I have the case right now where I've set up powerdns, and set the allow-recursion-override=yes and set up the recursor, and I

Re: [Pdns-users] Recursion when Powerdns auth servers is SOA

2012-01-10 Thread bert hubert
On Jan 10, 2012, at 11:37 PM, Rory Toma wrote: To make sure that the local authoritative database overrides recursive information, PowerDNS first tries to answer a question from its own database. If that succeeds, the answer packet is sent back immediately without involving the recursor

[Pdns-users] Pre-announcement of PowerDNS Security Advisory 2012-01 to be released on the 10th of January

2012-01-08 Thread bert hubert
: High Impact: Temporary denial of service Exploit: Proof of concept Risk of system compromise: No Solution: Upgrade to PowerDNS Recursor 2.9.22.5 or 3.0.1 Workaround: Several Kind regards, Bert Hubert Netherlabs - -- PowerDNS Website: http://www.powerdns.com/ PowerDNS Community Website: http

Re: [Pdns-users] Retry NXDOMAIN with a secondary forwarder

2012-01-07 Thread bert hubert
On Sat, Jan 07, 2012 at 03:45:08AM +, Richard Connon wrote: Is it possible through lua scripting or otherwise to configure powerdns to look NXDOMAIN responses up in a second forwarder before returning NXDOMAIN. To clarify I'd like it to go something like: No, Lua does not have that level

[Pdns-users] PowerDNS part of major DNSSEC deployment in Sweden

2012-01-02 Thread bert hubert
snapshot 20111215.2321 (available from http://powerdnssec.org). For more information about this migration, or of you want to know more about how to attempt large scale DNSSEC operations, please feel free to contact us on powerdns.supp...@netherlabs.nl and we will be glad to help! Kind regards, Bert

Re: [Pdns-users] Bad cache TTL with pdns-resursor

2011-12-29 Thread bert hubert
Hi Michael, The SOA will indeed probably not go to zero because it will have been renewed in that time. PowerDNS Recursor 3.3 and later take care to decrement the TTL when serving contents from the packet cache. So when you don't see it going down in 3.2, that is correct, and maybe a bit

Re: [Pdns-users] logging specific domain

2011-10-17 Thread bert hubert
For now, I would suggest tcpdump, or any of the other passive solutions. 'dnscap' also comes to mind. Bert On Tue, Oct 11, 2011 at 11:45:55AM +0200, Angel Bosch Mora wrote: hi, i want to analize queries from one specific domain. i've activated webserver but i can only see top

Re: [Pdns-users] SLAVE refresh performance

2011-09-09 Thread bert hubert
On Fri, Sep 09, 2011 at 03:20:36PM +0200, Klaus Darilion wrote: Currently ~10 000 zones are configured. Every slave-cycle-interval=60 PDNS checks if the refresh is expired, thus causing 10 000 SOA queries, taking around 5 seconds. Hi Klaus, These are probably the 1 queries on the local

Re: [Pdns-users] new pdns mysql web interface

2011-08-24 Thread bert hubert
On Wed, Aug 24, 2011 at 03:28:04PM +0200, Fagyal Csongor wrote: I have written a multiuser PowerDNS MySQL zone editor in PHP. It comes with an install, some docs and other goodies, e.g. a perl script to use the pipe backend so even if your MySQL server goes down your DNS will still be

Re: [Pdns-users] PowerDNS and multiple backends

2011-08-23 Thread bert hubert
On Mon, Aug 22, 2011 at 10:33:20AM +0200, bert hubert wrote: On Fri, Aug 19, 2011 at 09:33:24AM +0200, abang wrote: It seems all works as expected. But every time I reload or start PowerDNS, my syslog shows for each bind zone (we have 791) which is loaded these two lines: This means mysql

Re: [Pdns-users] PowerDNS and multiple backends

2011-08-22 Thread bert hubert
On Fri, Aug 19, 2011 at 09:33:24AM +0200, abang wrote: It seems all works as expected. But every time I reload or start PowerDNS, my syslog shows for each bind zone (we have 791) which is loaded these two lines: This means mysql connection and pipe backend are starting 791 times! Is this

Re: [Pdns-users] Additional NSEC3-Record in Response - DNSSEC Validation fails

2011-08-22 Thread bert hubert
On Mon, Aug 22, 2011 at 03:41:57PM +0200, Michael Braunoeder wrote: I did some more DNSSEC-testing and found another bug: I was starting to worry that too little bugs were being found ;-) When querying for an undefined records, PDNS adds an additional NSEC3-Record into the response and the

Re: [Pdns-users] configuring ALSO-NOTIFY support using the domain metadata table

2011-08-18 Thread bert hubert
On Thu, Aug 18, 2011 at 08:53:11AM -0600, Bauer, Steven J. wrote: After looking through the source it appears that dnssec queries have to be enabled to get data out of the domainMetadata table. In the code file Hi Steven, This is indeed correct. If the 'gmysql-dnssec' (or gpsql- or gsqlite3-)

Re: [Pdns-users] PowerDNS in an ISP environment

2011-08-16 Thread bert hubert
On Tue, Aug 16, 2011 at 08:38:07AM +0100, Chris Russell wrote: Hi All, Quick question - is anyone on the list using PDNS in an ISP environment, especially for auth services ? The best I can do is refer to this thread, which lists some data points:

Re: [Pdns-users] PDNS recursor Dual Stack

2011-07-25 Thread bert hubert
On Fri, Jul 22, 2011 at 03:34:29PM -0700, Chris Hesselrode wrote: I've disabled iptables and ip6tables, and get the same result. If you bind only to ::1, does the system answer on 127.0.0.1? It should, on Linux. Bert -- PowerDNS Website: http://www.powerdns.com/ PowerDNS Community

Re: [Pdns-users] PowerDNS 3.0-rc3 rpm packages

2011-07-25 Thread bert hubert
On Tue, Jul 19, 2011 at 10:28:35PM +0200, Morten P.D. Stevens wrote: At first glance, everything seems to be working. Nevertheless, I would like to know if this is suitable for continuous use. (with respect to the final PowerDNS 3.0 rpms) Hi Morten, The best place for RHEL/CentOS is:

Re: [Pdns-users] 4th level names and SOA records

2011-07-25 Thread bert hubert
Grant, If at all possible, could you check what 3.0 does for your setup? This would help us narrow down the problem. Bert On Wed, Jul 20, 2011 at 02:13:13PM -0700, Grant Keller wrote: On 07/20/2011 02:04 PM, Grant Keller wrote: On 07/14/2011 12:06 PM, bert hubert wrote: On Thu

Re: [Pdns-users] Not Authoritative for AAAA when label does not exist in zone?

2011-07-25 Thread bert hubert
On Mon, Jul 25, 2011 at 11:23:52AM -0700, Zane Thomas wrote: I have a zone bar.com for which pdns (3.0) is authoritative, there are no records in the zone. Could you add the output of 'dig +norecurs -t bar.com' and 'dig +norecurs -t foo.bar.com' and 'dig +norecurs -t any

Re: [Pdns-users] Not Authoritative for AAAA when label does not exist in zone?

2011-07-25 Thread bert hubert
On Mon, Jul 25, 2011 at 11:59:33AM -0700, Zane Thomas wrote: zane@zane:~$ dig @10.11.247.52 +norecurse -t ns1.bar.com ;; -HEADER- opcode: QUERY, status: NOERROR, id: 38113 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;ns1.bar.com. IN I just

Re: [Pdns-users] Not Authoritative for AAAA when label does not exist in zone?

2011-07-25 Thread bert hubert
On Mon, Jul 25, 2011 at 12:39:37PM -0700, Zane Thomas wrote: The backend is mine, in getSOA I always set auth=true for bar.com. The backend is not DNSSEC enabled. Could you pretty please with sugar on top mention with any bug report that you are running based on a backend you wrote yourself? I

Re: [Pdns-users] Not Authoritative for AAAA when label does not exist in zone?

2011-07-25 Thread bert hubert
On Mon, Jul 25, 2011 at 02:00:02PM -0700, Zane Thomas wrote: Sorry about that, will be sure to note use of my own backend in the future. I suggest we move this discussion to pdns-dev. This following code is setting weHaveUnauth to true because sd.qname != rr.qname // the line below

Re: [Pdns-users] When I enable master, It opens issues with ipv6 ...

2011-07-23 Thread bert hubert
On Fri, Jul 22, 2011 at 07:54:33PM -0600, kim Doff wrote: We tested v2247 http://powerdnssec.org/downloads/pdns-3.0.20110722.2247.tar.gz But it has the same bug master=yes Also, It does not bind anymore after setting master=no To disable IPv6 completely, you need to set

Re: [Pdns-users] When I enable master, It opens issues with ipv6- ...

2011-07-23 Thread bert hubert
On Sat, Jul 23, 2011 at 09:19:41AM -0600, kim Doff wrote: We tested v3.0.20110722.2247 with this config: Is it ok? No, since you did not do what I said. #local-address=0.0.0.0 local-address=204.10.63.15,127.0.0.1 #local-ipv6=::1 #query-local-address6=::1 local-port=53 This is what I

Re: [Pdns-users] When I enable master, It opens issues with ipv6

2011-07-22 Thread bert hubert
On Thu, Jul 21, 2011 at 12:18:26PM -0600, kim Doff wrote: Hello, Could somebody help me? My PowerDNS is working fine, but When I enable *master=yes* in pdns.conf It will open issues with ipv6 as shown on logs Please try build 2247 which should be available very shortly on

[Pdns-users] PowerDNS Authoritative Server 3.0 has been released

2011-07-22 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 PowerDNS Authoritative Server 3.0 has been released! Version 3.0 of the PowerDNS Authoritative Server brings a number of important features(like DNSSEC), as well as over two years of accumulated bug fixing. Available from: *

Re: [Pdns-users] IPv4 and IPv6 sockets at the same time

2011-07-21 Thread bert hubert
On Thu, Jul 21, 2011 at 01:47:31PM +0200, Marten Lehmann wrote: Should I file a bug report? This might be a variant of http://wiki.powerdns.com/trac/ticket/209 Could you open a new bug and reference 209 in the description? Thanks! We're all very busy with 3.0 auth right now, but the recursor

Re: [Pdns-users] pgsql db lookup failures

2011-07-20 Thread bert hubert
On Wed, Jul 20, 2011 at 01:28:19AM -0400, Charles Sprickman wrote: This issue has been addressed in build 2234 which has just been published on http://powerdnssec.org/downloads Can you test? Quick followup - this has been running in production for a few days now. No issues so far.

Re: [Pdns-users] PowerDNS Authoritative Server 3.0-rc3 (FINAL!) released

2011-07-20 Thread bert hubert
wrong? Please advise. Thanks, Nick On 19/7/2011 2:56 μμ, bert hubert wrote: PowerDNS Authoritative Server 3.0-RC3 ... ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] PowerDNS Authoritative Server 3.0-rc3 (FINAL!) released

2011-07-20 Thread bert hubert
On Wed, Jul 20, 2011 at 08:48:59AM +0100, Chris Russell wrote: If he also can document (in detail!) the process of building these packages, we will appreciate that! This will enable other people to +1, like Nick I've tried before to do this and struggled every time. Well, this is where

Re: [Pdns-users] PowerDNS does not respond to any query after DNSSEC

2011-07-20 Thread bert hubert
On Wed, Jul 20, 2011 at 11:33:07AM -0600, kim Doff wrote: Could you please help me? Yes! My PowerDNS was working perfectly. Wonderful. But I enabled DNSSEC and I followed this tutorial step by step. http://jpmens.net/2011/01/13/powerdns-implements-dnssec/ Can you confirm that you updated

[Pdns-users] PowerDNS Authoritative Server 3.0-rc3 (FINAL!) released

2011-07-19 Thread bert hubert
PowerDNS Authoritative Server 3.0-RC3 This is fully expected to be the 'real 3.0' release! It can be downloaded from: http://downloads.powerdns.com/releases/pdns-3.0-rc3.tar.gz http://downloads.powerdns.com/releases/rpm/pdns-static-3.0rc3-1.x86_64.rpm

Re: [Pdns-users] Pipebackend Issue with pdns-3.0-rc3.20110719.2239

2011-07-19 Thread bert hubert
On Tue, Jul 19, 2011 at 03:58:08PM +0100, Keith Brazington wrote: We've just started using the rc3. Everything looked good until we ran Good catch! Solved in 2244, which is now being built and will be available for download shortly from http://powerdnssec.org/downloads/ The issue is that

Re: [Pdns-users] 3.0-rc3 libmysqlclient.so error on Debian squeeze

2011-07-19 Thread Bert Hubert
Hmm, the binary should be fully static, could you double check with ldd? -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. Seth Mattinen se...@rollernet.us wrote: I just tried the i386 .deb on a test server; doesn't seem to want to start: timmy:~# wget

Re: [Pdns-users] 3.0-rc3 libmysqlclient.so error on Debian squeeze

2011-07-19 Thread bert hubert
On Tue, Jul 19, 2011 at 09:59:26AM -0700, Seth Mattinen wrote: On 7/19/11 9:15 AM, Bert Hubert wrote: Hmm, the binary should be fully static, could you double check with ldd? Jul 19 09:53:13 [0xb78f4400] I'll have to try it on a freshly installed system; perhaps it doesn't like my config

Re: [Pdns-users] 3.0-rc3 libmysqlclient.so error on Debian squeeze

2011-07-19 Thread bert hubert
On Tue, Jul 19, 2011 at 04:02:28PM -0700, Seth Mattinen wrote: I ended up commenting out the whole thing; the crash trigger was launch=gmysql. Can you double check your server is not trying to load a gmysqlbackend.so from your older compilation attempt? Can you run: strace -o log-for-bert -Ff

Re: [Pdns-users] pgsql db lookup failures

2011-07-14 Thread bert hubert
This issue has been addressed in build 2234 which has just been published on http://powerdnssec.org/downloads Can you test? Thanks to Peter van Dijk for additional debugging. Bert On Mon, Jul 11, 2011 at 07:54:59PM +0200, bert hubert wrote: Hi everybody, This issues has been turned

Re: [Pdns-users] pgsql db lookup failures

2011-07-14 Thread bert hubert
On Thu, Jul 14, 2011 at 02:59:44PM -0400, Charles Sprickman wrote: A quick test here (stopping postgres, ask pdns for an uncached record, get servfail, restart postgres, ask again) seems to indicate this works. Great! I patched directly against the version I'm already using (r2191). Since

Re: [Pdns-users] 4th level names and SOA records

2011-07-14 Thread bert hubert
On Thu, Jul 14, 2011 at 11:48:53AM -0700, Grant Keller wrote: Hello all, So we provide delegation for san-francisco.ca.us. We have one users domain (gimpelevich.san-francisco.ca.us) with a zone file consisting of: Before delving into this, can you let me know which version of powerdns you

Re: [Pdns-users] pgsql db lookup failures

2011-07-11 Thread bert hubert
Hi everybody, This issues has been turned into a blocker for the 3.0-final release. Could you open a ticket to that effect on http://wiki.powerdns.com/ ? Please follow the signup instructions carefully! Thanks. Bert On Sat, Jul 09, 2011 at 05:24:11PM -0400, Charles Sprickman wrote:

Re: [Pdns-users] Enable/Disable domain without breaking PowerDNS.

2011-06-30 Thread bert hubert
On Thu, Jun 30, 2011 at 10:59:19PM +0200, Tino Donderwinkel wrote: In order for this to work, I have altered some of the basic queries by means of the configuration file. Many people have done it in this way. For example the 'any-query'. I have modified it in such a way that it yields no

Re: [Pdns-users] PowerDNS and Different Configuration File

2011-06-28 Thread bert hubert
On Tue, Jun 28, 2011 at 02:31:55AM +0300, Php Coderator wrote: 2011/6/23 bert hubert On Thu, Jun 23, 2011 at 10:33:11PM +0300, Php Coderator wrote: open(/home/system/config/dns/pdns/pdns.conf, O_RDONLY|O_LARGEFILE) = 4 Can you show this file or at least 'grep launch /home/system

Re: [Pdns-users] Random -- Entropy key

2011-06-28 Thread bert hubert
On Tue, Jun 28, 2011 at 03:11:10PM +0200, Jan-Piet Mens wrote: Bert, On Wed May 11 2011 at 20:28:44 CEST, bert hubert wrote: I've heard good things about http://www.entropykey.co.uk/ . This is a sort of halfway solution - I'd not suggest just using /dev/urandom afterwards for state

Re: [Pdns-users] PowerDNS and Different Configuration File

2011-06-23 Thread bert hubert
On Thu, Jun 23, 2011 at 09:12:34PM +0300, Php Coderator wrote: Hello all! I have compiled latest stable version of PowerDNS and trying to run it with gmysql extension. When I start it with the (modified) default configuration file (which is under /usr/local/etc), everything is ok. However,

Re: [Pdns-users] PowerDNS and Different Configuration File

2011-06-23 Thread bert hubert
On Thu, Jun 23, 2011 at 10:33:11PM +0300, Php Coderator wrote: open(/home/system/config/dns/pdns/pdns.conf, O_RDONLY|O_LARGEFILE) = 4 Can you show this file or at least 'grep launch /home/system/config/dns/pdns/pdns.conf' ? Bert ___ Pdns-users

Re: [Pdns-users] PDNS devel and weird IPv6 log entries

2011-06-14 Thread bert hubert
On Tue, Jun 14, 2011 at 11:01:40AM +0200, Detlef Peeters wrote: Hello, I'm using the FreeBSD Port powerdns-devel-20110529-2203.tbz from http://www.cainites.net/files/powerdns/ After a domain update I can see the following log entries with a not correct IPv6 address. Hi Detlef, Do you

Re: [Pdns-users] Disabling DNSSEC on a Domain

2011-06-14 Thread bert hubert
On Tue, Jun 14, 2011 at 08:56:41PM +1200, Craig Whitmore wrote: A have been trying to automate this all and have a number of questionsŠ 1. http://doc.powerdns.com/dnssec-operational-doctrine.html say to use pdnssec disable-dnssec but there is no command so what the proper way of making a

<    1   2   3   4   5   6   7   8   9   >