Re: [Pdns-users] pdns-recursor-3.3rc2 cache is growing slow

2010-09-20 Thread bert hubert
Odd - can you paste some 'stats:' lines from the log files? stats: 4331362754 questions, 1003788 cache entries, 100987 negative entries, 27% cache hits stats: throttle map: 2752, ns speeds: 76672 stats: outpacket/query ratio 3205%, 2% throttled, 0 no-delegation drops stats: 263614

[Pdns-users] PowerDNS Recursor 3.3-RC3 released

2010-09-20 Thread bert hubert
Dear PowerDNS community, PowerDNS Recursor 3.3 Release Candidate 3 is now available! It is in wide production use already, but we'd like everyone to take a good look at it before we release it as 3.3-final. If nothing crops up, RC3 will be the exact same as the 3.3 release. RC1 had some

Re: [Pdns-users] pdns recursor 3.2 cname resolution phenomenon

2010-09-19 Thread bert hubert
On Mon, Sep 20, 2010 at 07:32:51AM +0200, Thomas Mieslinger wrote: we're using pdns recursor for out company internal name resolution. We have some strange setups to support that can't easily be removed. In some of our offical Zones are CNAMEs. The A records to these Names are in our

Re: [Pdns-users] pdns-recursor-3.3rc2 our root expired messages

2010-09-16 Thread bert hubert
Found it solved in http://wiki.powerdns.com/trac/changeset/1716 This issue is harmless, but it is good to have it solved for the 'real' release. Thanks for the vigilance! Bert On Wed, Sep 15, 2010 at 01:39:11PM +0200, bert hubert wrote: On Wed, Sep 15, 2010 at 01:37:30PM +0200, Detlef

Re: [Pdns-users] pdns-recursor-3.3rc2 our root expired messages

2010-09-15 Thread bert hubert
On Wed, Sep 15, 2010 at 01:37:30PM +0200, Detlef Peeters wrote: pdns_recursor[32068]: objects-test.deviantart.com.edgesuite.net.: our root expired, repriming from hints and retrying pdns_recursor[32068]: s.de.net.: our root expired, repriming from hints and retrying Hi Detlef, Can you list

[Pdns-users] PowerDNS Recursor 3.3-RC2 released!

2010-09-13 Thread bert hubert
Dear PowerDNS community, PowerDNS Recursor 3.3 Release Candidate 2 is now available! It is in wide production use already, but we'd like everyone to take a good look at it before we release it as 3.3-final. If nothing crops up, RC2 will be the exact same as the 3.3 release. RC1 had some

[Pdns-users] PowerDNS Recursor 3.3-RC1 released!

2010-09-11 Thread bert hubert
Dear PowerDNS community, PowerDNS Recursor 3.3 Release Candidate 1 is now available! It is in wide production use already, but we'd like everyone to take a good look at it before we release it as 3.3-final. If nothing crops up, RC1 will be the exact same as the 3.3 release. Tar, RPM Deb for 32

Re: [Pdns-users] PowerDNS (2.9.22) crash with signal 8 (floating point exception)

2010-09-11 Thread bert hubert
On Sat, Sep 11, 2010 at 06:43:08PM +0700, Dmitriy Lyfar wrote: Hi, I'm using pdns with my own backend. Previous version I've used was 2.9.21 (from centos repo) and my backend works fine. But we decided to move to last version (pdns-static, 2.9.22, x86_64) and it can't even run with my

Re: [Pdns-users] PDNS-recursor-3.2 crashed under Solaris 10 (x86)

2010-09-10 Thread bert hubert
On Fri, Sep 10, 2010 at 10:20:07AM +0200, Christian Kuehn wrote: Hi, today I installed the Recursor 3.2 in a new Solaris 10 x86 and the process crashed immediately: Hi Christian, Sadly this is well known - see http://mailman.powerdns.com/pipermail/pdns-users/2010-August/006956.html

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-09-09 Thread bert hubert
save you an upgrade. Would this work for you? Bert. Sent from my phone. - Reply message - From: Simon Bedford sbedf...@plus.net Date: Mon, Sep 6, 2010 14:16 Subject: tcp listener issue - hopefully fixed To: bert hubert bert.hub...@netherlabs.nl Cc: Brad Dameron brad.dame

Re: [Pdns-users] dns queries timeout on secondary IPs

2010-09-08 Thread bert hubert
On Wed, Sep 08, 2010 at 08:31:45PM +0300, George wrote: I have CentOS 5.5 and powerdns 2.9.21 set up as a slave server. My problem is that pdns does not reply to queries that come from outside on any secondary IP . Here's the full story: Can you run: grep local-address /etc/powerdns/pdns.conf

Re: [Pdns-users] dns queries timeout on secondary IPs

2010-09-08 Thread bert hubert
On Wed, Sep 08, 2010 at 08:44:01PM +0300, George wrote: Here are the outputs: [r...@webprod02 ~]# grep local-address /etc/pdns/pdns.conf # local-address Local IP addresses to which we bind local-address=0.0.0.0 (...) pdns[6269]: It is advised to bind to explicit addresses with the

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-09-08 Thread bert hubert
On Sun, Aug 29, 2010 at 09:17:01PM +, Brad Dameron wrote: The release process for 3.3 can now start - only 1 feature request left to finish. Good to hear Bert. I'll run it through the ringer on Monday and see if we can reproduce the problem. Cross fingers that it is fixed. Brad,

Re: [Pdns-users] Successful, yet incomplete AXFR to BIND9 slave

2010-09-08 Thread bert hubert
On Thu, Sep 09, 2010 at 12:10:53AM +0300, Nikolaos Milas wrote: Indeed, I have confirmed that pdns does not send a complete set of records during AXFR, by executing: # dig example.com AXFR @dns.example.com where dns.example.com is the pdns/ldap server. The output is exactly the

[Pdns-users] Some notes for Solaris 10 on x86 users of the PowerDNS Recursor

2010-08-30 Thread bert hubert
Hi, This message is for everyone using the PowerDNS Recursor with Solaris 10 on x86 (non-UltraSPARC) hardware. It turns out that Solaris 10 on x86 has some issues standing in the way of high performance for the PowerDNS Recursor. With some care, good results can be achieved however. If you need

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-08-29 Thread bert hubert
On Mon, Aug 23, 2010 at 11:37:42AM +0100, Simon Bedford wrote: Just returned from annual leave to this welcome news, has anyone had a chance to try it as yet and investigate whether the bug still manifests? And does it no longer happen when running Brad's test script? Simon, Sadly we found

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-08-29 Thread bert hubert
On Sun, Aug 29, 2010 at 04:56:14PM +0200, bert hubert wrote: We've fixed yet another bug that might be causing the issue, and we are currently testing that. This drop can be found on http://svn.powerdns.com/snapshots/pdns-recursor-3.3-pre.tar.bz2 Our testing shows that the problem

Re: [Pdns-users] recursor resolv ERROR

2010-08-26 Thread bert hubert
On Thu, Aug 26, 2010 at 01:20:52PM +0400, Dmitry Rybin wrote: $ dig +short my.smsfeedback.ru @78.108.89.252 click.smsbliss.ru. $ dig +short click.smsbliss.ru @ns1.nameself.com 79.125.121.14 All fine, bind resolves this domain, unbound too, but pdns-recursor - not. It is broken. There are

Re: [Pdns-users] MySQL backend and notify

2010-08-12 Thread bert hubert
On Thu, Aug 12, 2010 at 08:55:17AM +0200, Yves Goergen wrote: On 12.08.2010 08:28 CE(S)T, bert hubert wrote: If configured with 'master' in the configuration, it will periodically retrieve a list of all SOA serial numbers, and determine which ones changed. Does anybody know what time

Re: [Pdns-users] crashes in bind backend on rediscover

2010-08-11 Thread bert hubert
On Wed, Aug 11, 2010 at 02:24:04PM +0100, Richard Poole wrote: We're seeing crashes in powerdns 2.9.22 when calling pdns_control rediscover. We have a cron job that does this, currently twice an hour, and on average about once a day it results in a crash, looking like this in

[Pdns-users] tcp listener issue - hopefully fixed

2010-08-09 Thread bert hubert
[mailto:pdns-users-boun...@mailman.powerdns.com] On Behalf Of bert hubert Sent: Tuesday, July 06, 2010 9:01 AM To: Mike Cc: Brad Dameron; pdns-users@mailman.powerdns.com Subject: Re: [Pdns-users] Possible tcp listener issue The issue has now been reproduced on one of the PowerDNS servers

Re: [Pdns-users] Possible bug observed in PowerDNS Recursor 3.2.1

2010-08-05 Thread bert hubert
Briefly diving into this: On Thu, Aug 05, 2010 at 10:12:54AM -0400, Dave Sparro wrote: I see this all the time on BIND resolvers. The keys to the situation are: * Domain's old NS records have a relatively long TTL (from old auth. servers) * Domain owner changes auth. servers with registrar

Re: [Pdns-users] PDNS Timing Out

2010-07-27 Thread bert hubert
On Tue, Jul 27, 2010 at 04:49:19PM -0700, Brandon Lee wrote: Therefore, we turned on logging by setting the log level to 6 in the pdns.conf file and only on the master server we saw hundreds of queries like below being logged whereas on the slave server this was not happening.  Not sure

Re: [Pdns-users] strange resolution problem

2010-06-25 Thread bert hubert
, you find that BIND and PowerDNS resolve about the same amount of domains correctly. There will be some domains that work well in PowerDNS and not in BIND and the other way around. So please ask 'register.it' to solve their nameserver. Kind regards, Bert Hubert PS: in powerdns recursor 3.3

Re: [Pdns-users] Possible tcp listener issue

2010-06-23 Thread bert hubert
we made at least solves A bug just not your bug. Sent from my phone. - Reply message - From: Simon Bedford sbedf...@plus.net Date: Tue, Jun 22, 2010 09:44 Subject: [Pdns-users] Possible tcp listener issue To: bert hubert bert.hub...@netherlabs.nl Cc: pdns-users@mailman.powerdns.com

Re: [Pdns-users] Possible tcp listener issue

2010-06-23 Thread bert hubert
From: pdns-users-boun...@mailman.powerdns.com [pdns-users-boun...@mailman.powerdns.com] On Behalf Of bert hubert [bert.hub...@netherlabs.nl] Sent: 23 June 2010 12:47 To: Simon Bedford Cc: pdns-users@mailman.powerdns.com Subject: Re: [Pdns-users] Possible tcp listener issue Simon

Re: [Pdns-users] Possible tcp listener issue

2010-06-21 Thread bert hubert
Simon, the solution to your issue is almost certainly in http://wiki.powerdns.com/trac/changeset/1640 Even though you do not see the log messages, I'm pretty sure this is it. Bert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com

[Pdns-users] PowerDNSSEC, PowerDNS @ ICANN38

2010-06-20 Thread bert hubert
Hi everybody, I'll be part of the 'DNSSEC Workgroup' over at ICANN in Brussels this coming week. There, I will present 'PowerDNSSEC' plus our vision of DNSSEC on the resolver side of large ISPs. More details can be found on http://brussels38.icann.org/node/12491 and you can even join in

Re: [Pdns-users] Possible tcp listener issue

2010-06-18 Thread bert hubert
at 04:16:50PM +0200, bert hubert wrote: On Thu, Jun 17, 2010 at 03:14:39PM +0100, Simon Bedford wrote: Bert, its now climbing and not seeming to close any clients on both servers now, although one is much worse than the other, one is at 11 and the other is at 108 tcp-clients at the moment

Re: [Pdns-users] IPv4/IPv6 nameserver preference by recursor?

2010-06-16 Thread bert hubert
On Tue, Jun 15, 2010 at 05:10:11PM -0600, Darren Gamble wrote: We just wanted to get some information on how the recursor behaves when presented with a NS record set containing both IPv6 and IPv4 addresses, and/or if a NS record name has both A and records. If there a preference by the

Re: [Pdns-users] PDNS Recursor and reverse lookup

2010-06-16 Thread bert hubert
On Wed, Jun 16, 2010 at 10:34:30AM +0200, Uroš Gruber wrote: Hi, here is result from one of IP Try adding -x to the command line. From the 'dig' manpage: 'The default query type is A, unless the -x option is supplied to indicate a reverse lookup.' [r...@host1 ~]#dig @91.185.194.202

Re: [Pdns-users] Possible tcp listener issue

2010-06-16 Thread bert hubert
On Wed, Jun 16, 2010 at 11:10:29AM +0100, Simon Bedford wrote: I have been running the 'get tcp-clients' every 5 mins in cron on both servers, one is very low 10 and fluctuates, the other is just growing and growing and is currently at 55, hope this info is of value for debug. Is there any

Re: [Pdns-users] Possible tcp listener issue

2010-06-15 Thread bert hubert
On Tue, Jun 15, 2010 at 02:23:04PM +0100, Simon Bedford wrote: It contains some other exciting stuff too, and it appears to be stable for production use. I have now built a static package and installed to 2 of the 8 servers after testing in isolation, they appear to be running fine and I can

Re: [Pdns-users] Possible tcp listener issue

2010-06-13 Thread bert hubert
On Mon, Jun 07, 2010 at 04:08:17PM +0100, Simon Bedford wrote: Simon, Could you apply this patch: http://wiki.powerdns.com/trac/changeset/1623 And periodically run 'rec_control get tcp-clients' ? Hi Bert, I have just returned from annual leave and began to look into this

Re: [Pdns-users] Can't start powerdns web on port 80 when running pdns not as root

2010-06-10 Thread bert hubert
On Thu, Jun 10, 2010 at 08:32:00AM +0200, Thomas Mieslinger wrote: when I set the Webseverport to 80 and run powerdns as user a non root user then the powerdns fails to start with the message permisson denied. Powerdns seems to drop the root priviledges too early. Is someone willing to fix

Re: [Pdns-users] Slave zone just won't refresh....

2010-06-09 Thread bert hubert
Garry, 2.6.1 WKS WKS records are deprecated in [RFC 1123]. They serve no known useful function, except internally among LISP machines Normally we'd whip up an implementation just to have the issue go away, but it is a pretty weird record type too, containing a bitmap of protocols. Unknown

Re: [Pdns-users] multithreaded epoll_wait in PDNS

2010-06-06 Thread bert hubert
On Sun, Jun 06, 2010 at 06:40:18PM +0200, Christof Meerwald wrote: On Tue, 1 Jun 2010 16:12:45 -0500, Naked Short-Selling wrote: I read your post regarding multithreaded epoll_wait behavior on lkml a couple of months ago: http://lkml.org/lkml/2010/3/3/441 My understanding is that

Re: [Pdns-users] Possible tcp listener issue

2010-05-30 Thread bert hubert
On Thu, May 20, 2010 at 11:12:29AM +0100, Simon Bedford wrote: This has happened a further twice in the last week, output sent off list, please let me know if you need any further information. Simon, Could you apply this patch: http://wiki.powerdns.com/trac/changeset/1623 And periodically

Re: [Pdns-users] [recursor] Segmentation fault at startup

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 09:29:57AM +0200, Stephane Bortzmeyer wrote: % pdns_recursor % uname -a NetBSD golgoth 5.0.1 NetBSD 5.0.1 (GENERIC) #0: Thu Oct 1 15:46:16 CEST 2009 steph...@golgoth:/usr/obj/sys/arch/i386/compile/GENERIC i386 Hi

Re: [Pdns-users] [recursor] Segmentation fault at startup

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 10:18:43AM +0200, Stephane Bortzmeyer wrote: It was properly compiled but the Makefile contains a 'strip $(DESTDIR)/$(SBINDIR)/pdns_recursor' :-( Debugging the non-installed For installed binaries, this is common. OK, the ACL parsing is not robust enough. What is

Re: [Pdns-users] [recursor] Segmentation fault at startup

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 11:01:38AM +0200, Stephane Bortzmeyer wrote: [BTW, it would be better to do so on a ticketing system but I cannot find a way to create a new ticket in the PowerDNS Trac.] There is some anti-spam trickery: TO FILE BUGS, OR CHANGE THE WIKI, CLICK 'LOGIN' ABOVE, USERNAME

Re: [Pdns-users] [recursor] configure could be more user-friendly

2010-05-26 Thread bert hubert
Derek, Dave, Stephane, (a rare top-post!), your points are well understood, and will be addressed. The immediate reason that the pdns-recursor did not have full auto*, and is unlikely to get it, was the deep dissatisfaction we felt with this suite of programs. It turned out to be difficult to

Re: [Pdns-users] [recursor] configure could be more user-friendly

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 10:15:34PM +0200, Stephane Bortzmeyer wrote: On Wed, May 26, 2010 at 07:57:13PM +0200, bert hubert bert.hub...@netherlabs.nl wrote a message of 85 lines which said: The immediate reason that the pdns-recursor did not have full auto*, and is unlikely to get

Re: [Pdns-users] Acheiving 40,000 QPS

2010-05-17 Thread bert hubert
answer your question. The main trick is to have enough queries operating in parallel, which incidentally is a close match to 'real life' heavy use operation. The operating system of the numbers above is Ubuntu Karmic Koala. Let me know if you have further questions. Kind regards, Bert Hubert On Mon

Re: [Pdns-users] Acheiving 40,000 QPS

2010-05-17 Thread bert hubert
On Mon, May 17, 2010 at 03:23:21PM +0800, Lee Standen wrote: Thanks for that information, Bert. I had seen the documentation before... perhaps I should provide some more information. Here are the options I'm using at the moment (I've tried several values):

[Pdns-users] DENIC outage of .de zones: PowerDNS Recursor workaround

2010-05-12 Thread bert hubert
Dear PowerDNS people, The German .de zone currently has an outage on most of its TLD servers. To keep your customers able to resolve .de domains reliably, you can use the following configuration setting: forward-zones=de=87.233.175.25;81.91.161.228 Please remove this setting as soon as the .DE

Re: [Pdns-users] DENIC outage of .de zones: PowerDNS Recursor workaround

2010-05-12 Thread bert hubert
DENIC reports that the problem has been resolved, please remove the 'forward-zones=de..' statement again. DENIC has indicated these two servers are not able to serve the whole world. Kind regards, Bert Hubert On Wed, May 12, 2010 at 02:51:16PM +0200, bert hubert wrote: Dear PowerDNS people

Re: [Pdns-users] Problem compiling pdns-recursor on Solaris 10

2010-05-06 Thread bert hubert
contains most of the pdns-recursor sources, it is wrong to build the recursor from there. http://downloads.powerdns.com/releases/pdns-recursor-3.2.tar.bz2 this is the correct place to start. It should compile out of the box. Kind regards, Bert Hubert Operating system: uname -a SunOS

Re: [Pdns-users] Possible tcp listener issue

2010-05-05 Thread bert hubert
On Wed, May 05, 2010 at 11:27:13AM +0200, Ton van Rosmalen wrote: Our primary auth pdns didn't respond to tcp queries anymore where udp queries still worked. A restart solved the problem. I didn't think anything of it until I read these new messages on this thread. Could it be a shared

Re: [Pdns-users] Possible tcp listener issue

2010-05-05 Thread bert hubert
On Tue, May 04, 2010 at 05:37:10PM +0100, Simon Bedford wrote: How many TCP/IP queries do you see per second, roughly? A quick run of rec_control should dig this up. date;rec_control get tcp-questions Tue May 4 17:34:22 BST 2010 79371 date;rec_control get tcp-questions Tue May 4

Re: [Pdns-users] DNSSEC changes - May 5th

2010-05-04 Thread bert hubert
if you had been running BIND and were seeing these results. But you are not. Kind regards, Bert Hubert On Tue, May 04, 2010 at 11:19:36AM -0400, Barron, Josh wrote: Hello all, I've been asked to look into the issues stemming from the changes being rolled out in a testing form at the root

Re: [Pdns-users] Possible tcp listener issue

2010-05-04 Thread bert hubert
On Tue, May 04, 2010 at 05:04:51PM +0100, Simon Bedford wrote: We created a patched version in the end and rolled to one server back on the 8th April, no fault seen since and now rolled to the entire platform as of today, looking good. We have now had 2 more failures of the tcp listener on

[Pdns-users] Repeated statement on non-impact of DNSSEC rollout on PowerDNS Software

2010-04-26 Thread bert hubert
, the responses it receive are not altered by the rollout of DNSSEC. Some other server implementations send out 'DNSSEC OK' questions by default, and they might be impacted by large packets, fragmentation, EDNS0 blocking etc. But not PowerDNS. Kind regards, Bert Hubert PowerDNS PS: we note that PowerDNS

Re: [Pdns-users] Recursive lookups over IPv6 failing

2010-04-03 Thread bert hubert
On Fri, Apr 02, 2010 at 01:09:19PM -0600, Brielle Bruns wrote: Querying from IPv6 host on the same LAN to the server: www.apple.com ;; Got SERVFAIL reply from 2001:470:e867::3, trying next server Brielle, have you added ::/0 to the allow-recurse list? That solves the exact same issue here.

Re: [Pdns-users] Problem with PowerDNS Recursor 3.2 and EDNS enabled

2010-04-01 Thread bert hubert
On Thu, Apr 01, 2010 at 12:09:12PM +0200, Detlef Peeters wrote: Hello, I've installed yesterday the Update to PowerDNS Recursor 3.2. In the config I've enabled EDNS with the option disable-edns=no. Detlef, You've discovered the (removed) EDNS support from PowerDNS. By mistake,

Re: [Pdns-users] Possible tcp listener issue

2010-03-31 Thread bert hubert
On Tue, Mar 30, 2010 at 03:09:08PM +0100, Simon Bedford wrote: A quick update - I've traced down an issue that may have been causing this. Would you be interested in testing this small patch? I can help test this patch Bert. It can be found on: http://wiki.powerdns.com/trac/changeset/1546 or

Re: [Pdns-users] Possible tcp listener issue

2010-03-30 Thread bert hubert
A quick update - I've traced down an issue that may have been causing this. Would you be interested in testing this small patch? Bert On Tue, Mar 30, 2010 at 02:58:16PM +0100, Simon Bedford wrote: We have one of the instances on our non live server happening at the moment so I have

Re: [Pdns-users] Possible tcp listener issue

2010-03-25 Thread bert hubert
On Thu, Mar 25, 2010 at 05:54:23PM +0100, Laurent Papier wrote: I have also upgraded to pdns recursor 3.2 yesterday. And today, I have a strange problem on some of my systems. It seems be related to tcp DNS as the only thing that stopped working is using tcp dns queries. The rest of the

[Pdns-users] Statement on EDNS, DNSSEC and PowerDNS.

2010-03-19 Thread bert hubert
to PowerDNS, but only to BIND (and probably Unbound). Kind regards, Bert Hubert On Fri, Mar 19, 2010 at 08:13:42AM -0400, Curtis Maurand wrote: Its my understanding that EDNS is going to be required to exchange keys properly for DNSSEC. Am I wrong? Is EDNS going to be a requirement

Re: [Pdns-users] Spikey response times in powerdns recursor

2010-03-17 Thread bert hubert
On Wed, Mar 17, 2010 at 10:43:19AM +, Simon Bedford wrote: We have been running recursor as a caching name server for a number of months having moved from unbound, since this time we see good, in fact quick DNS response time but then when running 3.1.7.1 and .2 and also 3.2.1 we see

Re: [Pdns-users] Spikey response times in powerdns recursor

2010-03-17 Thread bert hubert
On Wed, Mar 17, 2010 at 11:16:40AM +, Simon Bedford wrote: Mar 17 11:57:02 [5] bbc.co.uk.: Resolved 'bbc.co.uk.' NS ns1.bbc.co.uk. to: 132.185.132.21 Mar 17 11:57:02 [5] bbc.co.uk.: Trying IP 132.185.132.21:53, asking 'bbc.co.uk.|A' Mar 17 11:57:04 [5] bbc.co.uk.: timeout resolving

Re: [Pdns-users] Negative cache problem since upgrade to 3.2

2010-03-09 Thread bert hubert
On Tue, Mar 09, 2010 at 03:06:09PM +0100, Oli Schacher wrote: Hi list We upgraded our resolvers to 3.2 (Centos5, 64bit) After the upgrade, the setting max-negative-ttl=30 does not seem to work anymore. New records take up several minutes until they show up in the cache. Even if we

Re: [Pdns-users] Pdns-recurser not decrementing TTL

2010-03-09 Thread bert hubert
On Tue, Mar 09, 2010 at 11:35:22PM +0200, Paul Wollner wrote: I have just upgraded from PowerDNS recursor 3.1.7.2 to 3.2. Unfortunately it appears the TTLs for records are never decremented. For the meantime I have reverted to 3.1.7.2. Is anyone else experiencing this problem? Try

Re: [Pdns-users] cache size and max-cache-entries

2010-03-05 Thread bert hubert
On Fri, Mar 05, 2010 at 11:55:16AM +0100, Fabien Seisen wrote: i have some difficulties to understand what max-cache-entries means. Fabien, Which PowerDNS Recursor version did you test against? For a period of 5 minutes, in 3.1.7 you might see far higher numbers. This is addressed in 3.2.

Re: [Pdns-users] External CNames

2010-03-05 Thread bert hubert
On Fri, Mar 05, 2010 at 11:04:16AM -0500, Ross Halliday wrote: We don't have PowerDNS rolled out here yet so I can't speak from experience, but it makes sense to me that PowerDNS might just regurgitate the contents of the record for a CNAME whereas everything else is processed internally,

Re: [Pdns-users] DNSSEC support in PowerDNS

2010-03-03 Thread bert hubert
On Wed, Mar 03, 2010 at 08:43:46AM +0100, Sandro Tosi wrote: You have just given the answer to yourself. :-) thanks for confirming this! Now, what is the status of the WIP? 5% done, 99% and quite ready for release, else? The current status is that PowerDNSSEC 'lite' will be released in very

Re: [Pdns-users] Multipart TXT records

2010-03-01 Thread bert hubert
On Mon, Mar 01, 2010 at 03:29:50PM +, Chris Sarginson wrote: Hi guys, I'm trying to use the authoratitive server with a MySQL backend to do multipart TXT records - on the advice of someone in IRC I just tried inserting multiple records, however doing this is resulting in the record

Re: [Pdns-users] nslookup weirdness

2010-02-17 Thread bert hubert
On Wed, Feb 17, 2010 at 11:51:45PM +0100, Udo Rader wrote: 2.1.13.172.in-addr.arpa name = weird.example.com. exit hmm, I just tried something else from a remote server that has the troublesome pdns server as its primary nameserver: $ cat /etc/resolv.conf nameserver 172.13.1.1

Re: [Pdns-users] PowerDNS Recursor 3.2 Release Candidate 1 available

2010-02-15 Thread bert hubert
On Mon, Feb 15, 2010 at 08:54:23PM +0100, Marcel Pennewiß wrote: * Domains can now be forwarded with the 'recursion-desired' bit on or off. Feature suggested by Darren Gamble, implemented in commit 1451. DOCUMENTATION FORTHCOMING! Maybe Bert will write a few lines about this feature

[Pdns-users] PowerDNS Recursor 3.2 Release Candidate 1 available

2010-02-10 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, Please find below the release notes of the PowerDNS Recursor version 3.2, release candidate 1. RC1 is already deployed in a number of large places, and it appears to be holding up well. In addition, a number of future users have

[Pdns-users] PowerDNS Community IRC Channel moving to OFTC

2010-02-10 Thread bert hubert
Community to interact, than for there to be two (which do not mutually communicate). Kind regards, Bert Hubert ('ahu' on #powerdns) ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] PDNS doesn't feel authoritative?

2010-02-10 Thread bert hubert
On Thu, Feb 11, 2010 at 02:28:53AM +0100, Chris wrote: Earlier I set this the recursor to some random dns server on the internet. But there's the problem that pdns should serve some private zone that's not resolvable through the root servers. That works pretty well, as long as you don't use

Re: [Pdns-users] qtype argument to pipe backend is always set to 'ANY' (continued)

2010-02-04 Thread bert hubert
This question keeps getting asked, I've put a note about this in the documentation, http://doc.powerdns.com/backends-detail.html#AEN5622 For completeness: Besides regular query types, the DNS also knows the 'ANY' query type. When a server receives a question for this ANY type, it should reply

Re: [Pdns-users] pdns-recursor returning bad data intermittently

2010-02-04 Thread bert hubert
On Fri, Feb 05, 2010 at 08:07:23AM +0100, ab...@t-ipnet.net wrote: mydomain.net=172.17.18.241;172.17.18.242 maybe you have different zone data on your auth servers. What is the result of # dig @172.17.18.241 smtp.mydomain.net. and # dig @172.17.18.242 smtp.mydomain.net. In

Re: [Pdns-users] New PowerDNS GUI

2010-02-03 Thread bert hubert
On Wed, Feb 03, 2010 at 10:20:44AM +, Chris Maciejewski wrote: Hi, Just wanted to let you know I recently released a new PowerDNS GUI. It is a GPL v2. licensed and hosted at http://code.google.com/p/pdns-gui/ What can I say except: LOOKING GOOD! I see there is a demo on

[Pdns-users] update on Exactly simultaneous PowerDNS Recursor Crashes in a number of places

2010-02-01 Thread bert hubert
Hi everybody, I promised several people to summarise what we discovered about the spike of packets. It is not quite conclusive, but enough that we know what to do. The short summary is that the upcoming 3.2 release will contain some slight tweaks to improve stability, but that there is no reason

Re: [Pdns-users] PowerDNS and DNSSEC

2010-01-25 Thread bert hubert
On Mon, Jan 25, 2010 at 03:35:59PM +0100, Michael FROMENT wrote: I've test DNS packet size with my pdns-resursor and it seems that I cannot get packet size over 512bytes. (...) The PowerDNS Recursor can do 512 packets over TCP/IP fine. Outside of DNSSEC, 512 byte packets are exceedingly rare.

Re: [Pdns-users] [Pdns-announce] Attack scope clarification, Ubuntu PowerDNS Recursor Updates + need to restart

2010-01-21 Thread bert hubert
On Thu, Jan 21, 2010 at 01:15:04PM +0100, Sean Boran wrote: The PDNS tarball on : http://www.powerdns.com/en/downloads.aspx is still the same version, 2.9.22, which is the version that was around a year ago. Sean, That is the version number for the Authoritative Server - for the Recursor it

Re: [Pdns-users] Delegation of subdomain when allow-recursion-override=on

2010-01-19 Thread bert hubert
Hi Pizza, I briefly thought you were Anthony Mangieri ;-) But he has better things to do than manage DNS. Can you show an AXFR of your foobar.com domain? I'm not too aware of the exact workings of the LDAP backend, so I need to see if your problem is simply DNS related. Thanks. Bert

[Pdns-users] Attack scope clarification, Ubuntu PowerDNS Recursor Updates + need to restart

2010-01-09 Thread bert hubert
their older versions too once we get round to shipping the patch to 3.1.4. Many thanks to Imre Gergely, who mangled the patches for Ubuntu. Bert On Wed, Jan 06, 2010 at 04:19:56PM +0100, bert hubert wrote: The correct links to the .deb packages are: http://downloads.powerdns.com/releases/deb

[Pdns-users] Critical PowerDNS Recursor Security Vulnerabilities: please upgrade ASAP to 3.1.7.2

2010-01-06 Thread bert hubert
us. Kind regards, Bert Hubert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] Critical PowerDNS Recursor Security Vulnerabilities: please upgrade ASAP to 3.1.7.2

2010-01-06 Thread bert hubert
/pdns_recursor. Bert On Wed, Jan 06, 2010 at 04:11:09PM +0100, bert hubert wrote: Dear PowerDNS Users, Two major vulnerabilities have recently been discovered in the PowerDNS Recursor (all versions up to and including 3.1.7.1). Over the past two weeks, these vulnerabilities have been

Re: [Pdns-users] TCP listener hangs with fd error on recursor

2009-12-21 Thread bert hubert
On Mon, Dec 21, 2009 at 10:07:18AM +, Josh Berry wrote: I am having a problem with the powerdns recursor where the TCP listener dies every now and then unless the daemon is restarted periodically. Josh, Can you tell us if you are behind a firewall? Perhaps iptables on the host itself? Are

Re: [Pdns-users] TCP listener hangs with fd error on recursor

2009-12-21 Thread bert hubert
On Mon, Dec 21, 2009 at 11:30:25AM +, Josh Berry wrote: On Mon, Dec 21, 2009 at 10:07:18AM +, Josh Berry wrote: Can you tell us if you are behind a firewall? Perhaps iptables on the host itself? The server is not behind a firewall, it is behind a load balancer (Nortel

Re: [Pdns-users] How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-12 Thread bert hubert
On Thu, Nov 12, 2009 at 09:14:28PM +0100, Gerhard Gaußling wrote: I'm using powerdns since a long time on ubuntu/hardy amd64. My ISP changed his behaviour and now I get on NXDOMAIN an ad site with a search form. But I prefer to get the firefox error page. I can understand. How do I

[Pdns-users] PowerDNS Development Community Server hosted at XS4ALL

2009-11-08 Thread bert hubert
Hi everybody, Over the past few months, the PowerDNS Wiki and Subversion servers had a hard time and were no longer able to keep up with the growing amounts of traffic. Since these servers also routed my personal email, I had little choice but move the flood of spam to gmail. But no more! We

Re: [Pdns-users] MySQL libraries required?

2009-11-08 Thread bert hubert
On Sat, Nov 07, 2009 at 06:54:55PM -0800, Ask Bjørn Hansen wrote: After resetting my working copy and running bootstrap and CXXFLAGS=-I/opt/local/include/ ./configure --with-modules=pipe The current subversion trunk may indeed have problems compiling the Authoritative Server.

Re: [Pdns-users] Install latest PDNS and PDNS-Recursor on Solaris 10 Sparc

2009-10-29 Thread bert hubert
On Thu, Oct 29, 2009 at 1:35 AM, Barron, Josh jbar...@afsnetworks.com wrote: Ok looks like PDNS-Recursor compiled. I've attached the errors I received during the compilation.  FYI I'm using the following platform: SunOS ns1 5.10 Generic_141444-09 sun4v sparc SUNW,Sun-Fire-T1000 Now on to

Re: [Pdns-users] Install latest PDNS and PDNS-Recursor on Solaris 10 Sparc

2009-10-28 Thread bert hubert
On Wed, Oct 28, 2009 at 12:38 AM, Barron, Josh jbar...@afsnetworks.com wrote: Has anyone gotten the latest version of PDNS to install on Solaris 10 Sparc?? Lots of random posts out there but nothing much definitive… Josh, Can you try

Re: [Pdns-users] FW: Trying to compile with OpenDBX support - LUA issues?!?

2009-10-26 Thread bert hubert
Robert, The suggestion is to not compile the recursor from the authoritative tarball - this is not supported! So remove --enable-recursor, and things should be fine. Good luck! On Mon, Oct 26, 2009 at 5:07 PM, Robert Dunkley rob...@saq.co.uk wrote: Can anyone offer any advice on this? Have

[Pdns-users] Some comic relief - freeware is not malware, but it is close according to Nominum

2009-09-23 Thread bert hubert
Hi everybody! Sorry for being a bit silent over the past two weeks, have been very busy with our newly born son Guus! Mother and son are doing really well. In the meantime, you may enjoy the propaganda below from DNS vendor Nominum, who I know are stalking many subscribers of this list to

Re: [Pdns-users] wildcards and pipe backend

2009-09-23 Thread bert hubert
On Wed, Sep 23, 2009 at 10:17 PM, Fagyal Csongor conc...@conceptonline.hu wrote: The question is: if I know I have wildcard records, then I have to do a wildcard query? Currently what I do is to first query non-wildcard records, and if none is found, then I do a wildcard match. Is that correct?

[Pdns-users] PowerDNS PowerAdmin contributor Jorn Ekkelenkamp has passed away

2009-09-07 Thread bert hubert
if you want to attend. I wish his family and everyone who knew Jorn lots of strength in dealing with this tremendous loss. Bert Hubert PowerDNS.COM ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns

[Pdns-users] Presentation 'DNS Security in the Broadest Sense' online

2009-08-17 Thread bert hubert
Hi everybody, The presentation from last Friday can be found on http://tinydns.com/powerdns DNS Security in the Broadest Sense. In addition, a movie of the presentation, two interviews (radio video) and some nice photos can be found on:

Re: [Pdns-users] Presentation 'DNS Security in the Broadest Sense' online

2009-08-17 Thread bert hubert
This should of course read: http://tinyurl.com/powerdns Apologies for the confusion! On Mon, Aug 17, 2009 at 03:55:56PM +0200, bert hubert wrote: The presentation from last Friday can be found on http://tinydns.com/powerdns DNS Security in the Broadest Sense. -- http://www.PowerDNS.com

[Pdns-users] Reminder for visitors of HAR2009.ORG: presentation tomorrow!

2009-08-13 Thread bert hubert
Dear PowerDNS Users currently at HAR2009, Besides benefiting from PowerDNS serving the DNS at HAR2009, if you are interested in PowerDNS, you could consider attending my presentation about DNS Security in the Broadest Sense tomorrow (Friday) at 14:00 CET. Also, let me know if you want to meet

[Pdns-users] PowerDNS DNSSEC: your support is needed

2009-08-11 Thread bert hubert
to either acquire a support contract with us, or to fund DNSSEC development directly. If you are interested, or know someone who might be, please let us know and we can send you the 'PowerDNS DNSSEC Enhancement Project Proposal', which includes the budget we are trying to raise. Kind regards, Bert

[Pdns-users] PowerDNS Recursor 3.1.7.1 released!

2009-08-02 Thread bert hubert
Release notes with clickable links available on: http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-7-1 Download from: http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.1.tar.bz2 http://downloads.powerdns.com/releases/rpm/pdns-recursor-3.1.7.1-1.x86_64.rpm

Re: [Pdns-users] Logging All DNS Queries

2009-07-22 Thread bert hubert
On Wed, Jul 22, 2009 at 7:49 PM, Bryan Branniganbr...@branniganventures.com wrote: I would like to configure PowerDNS to log all DNS queries to a text file or to a MySQL table.  Does anyone know if this is possible? Bryan, The PowerDNS Authoritative Server does not have this ability, the

Re: [Pdns-users] Logging All DNS Queries

2009-07-22 Thread bert hubert
On Wed, Jul 22, 2009 at 9:36 PM, Brendan Oakleygent...@gmail.com wrote: On Wed, Jul 22, 2009 at 10:49 AM, Bryan Brannigan wrote: I would like to configure PowerDNS to log all DNS queries to a text file or to a MySQL table.  Does anyone know if this is possible? There is the query-logging

<    1   2   3   4   5   6   7   8   9   >