Re: [Pdns-users] zoneToCache - File Format

2022-01-19 Thread Otto Moerbeek via Pdns-users
On Wed, Jan 19, 2022 at 04:54:25PM +, Clint Anderson via Pdns-users wrote: > Otto & Walter - Thank you for the replies! > > Otto, > > My assumption was that the cache is the most efficient and if it was in the > cache, it would return the cached answer and never go looking for an update.

Re: [Pdns-users] zoneToCache - File Format

2022-01-19 Thread Walter Parker via Pdns-users
If what you want Is a DNS Blacklist, those are a separate thing from a DNS Cache. Instead of trying to use an existing DNS server, I’d spin up a separate instance of a PowerDNS authoritative server and populate it with your domains to be blocked (if the list is mostly static, you might use LMDB,

Re: [Pdns-users] zoneToCache - File Format

2022-01-19 Thread Clint Anderson via Pdns-users
Otto & Walter - Thank you for the replies! Otto, My assumption was that the cache is the most efficient and if it was in the cache, it would return the cached answer and never go looking for an update. Thank you for the clarification on the zoneToCache functionality, seems I was barking up

Re: [Pdns-users] zoneToCache - File Format

2022-01-19 Thread Bill Pye via Pdns-users
Hi I'd recommends using RPZ on your recursor, if you sign-up here: [ https://github.com/Homas/ioc2rpz#installation | https://github.com/Homas/ioc2rpz#installation ] - you'll get a ton of regularly updates feeds and you an implement your own blacklist/whitelist fairly easily. Take a look at

Re: [Pdns-users] PowerDNS Recursor Performance and Tuning

2022-01-19 Thread Otto Moerbeek via Pdns-users
On Thu, Jan 20, 2022 at 09:51:51AM +0330, Hamed Haghshenas via Pdns-users wrote: > >> How can I secure my dns Recursor? I try read document about dnssec in > powerdns wiki but can't understand what should I do ? > > >> >

Re: [Pdns-users] PowerDNS Recursor Performance and Tuning

2022-01-19 Thread Hamed Haghshenas via Pdns-users
>> How can I secure my dns Recursor? I try read document about dnssec in powerdns wiki but can't understand what should I do ? >> https://doc.powerdns.com/recursor/dnssec.html > In short: > dnssec=validat I set dnssec=validate, but one error

Re: [Pdns-users] PowerDNS Recursor Performance and Tuning

2022-01-19 Thread Brian Candler via Pdns-users
On 19/01/2022 09:54, Hamed Haghshenas via Pdns-users wrote: How can I secure my dns Recursor? I try read document about dnssec in powerdns wiki but can’t understand what should I do ? https://doc.powerdns.com/recursor/dnssec.html In short: dnssec=validate

[Pdns-users] PowerDNS Recursor Performance and Tuning

2022-01-19 Thread Hamed Haghshenas via Pdns-users
Hello Dears, I Configure PowerDNS Recursor with below configuration : allow-from-file=/etc/pdns-recursor/IP-Iran-List.txt setuid=pdns-recursor setgid=pdns-recursor local-address=127.0.0.1 x.x.x.x any-to-tcp=yes distribution-load-factor=1.25 pdns-distributes-queries=yes