[Pdns-users] PowerDNS DNSdist 1.9.4 released

[5]: https://downloads.powerdns.com/releases/dnsdist-1.9.4.tar.bz2 [6]: https://downloads.powerdns.com/releases/dnsdist-1.9.4.tar.bz2.sig [7]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital

[Pdns-users] PowerDNS DNSdist 1.9.3 released

-1.9.3.tar.bz2 [6]: https://downloads.powerdns.com/releases/dnsdist-1.9.3.tar.bz2.sig [7]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital signature

[Pdns-users] PowerDNS DNSdist 1.9.2 released

[5]: https://downloads.powerdns.com/releases/dnsdist-1.9.2.tar.bz2 [6]: https://downloads.powerdns.com/releases/dnsdist-1.9.2.tar.bz2.sig [7]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital

[Pdns-users] PowerDNS DNSdist 1.9.1 released

://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo

[Pdns-users] PowerDNS DNSdist 1.9.0

/dnsdist-1.9.0.tar.bz2 [17]: https://downloads.powerdns.com/releases/dnsdist-1.9.0.tar.bz2.sig [18]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital signature

[Pdns-users] PowerDNS DNSdist 1.9.0-rc1 released

/upgrade_guide.html#x-to-1-9-0-rc1 [6]: https://github.com/PowerDNS/pdns/issues/new/choose [7]: https://downloads.powerdns.com/releases/dnsdist-1.9.0-rc1.tar.bz2 [8]: https://downloads.powerdns.com/releases/dnsdist-1.9.0-rc1.tar.bz2.sig [9]: https://repo.powerdns.com Best regards, -- Remi Gacogne

[Pdns-users] PowerDNS DNSdist 1.8.3 released

/upgrade_guide.html#x-to-1-8-3 [4]: https://github.com/PowerDNS/pdns/issues/new/choose [5]: https://downloads.powerdns.com/releases/dnsdist-1.8.3.tar.bz2 [6]: https://downloads.powerdns.com/releases/dnsdist-1.8.3.tar.bz2.sig [7]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https

[Pdns-users] PowerDNS DNSdist 1.9.0-alpha4 released

/upgrade_guide.html#x-to-1-9-0-alpha4 [5]: https://github.com/PowerDNS/pdns/issues/new/choose [6]: https://downloads.powerdns.com/releases/dnsdist-1.9.0-alpha4.tar.bz2 [7]: https://downloads.powerdns.com/releases/dnsdist-1.9.0-alpha4.tar.bz2.sig [8]: https://repo.powerdns.com Best regards, -- Remi Gacogne

Re: [Pdns-users] [EXT] Re: remote backend

tree. There is such a test in test-remotebackend-unix.cc -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https

Re: [Pdns-users] correct answer for lookup in backend

203.0.113.2", "ttl": 60}]} If theres no records to answer, which is the correct answer? 1. {“result”:[]} 2. {“result”:false} The expected answer is an empty array. The current code treats a non-array value as an empty array but I wouldn't rely on this behaviour.

Re: [Pdns-users] remote backend

alize and dies That's very weird indeed, and unfortunately the unix connector is lacking a bit of logging in this area. Any chance you would be able to strace the authoritative server process? Cheers,f -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ __

Re: [Pdns-users] Blacklist domains

, or at least they should be. I would suggest looking into Response Policy Zones (RPZ) which was pretty much designed for this use-case: https://docs.powerdns.com/recursor/lua-config/rpz.html Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc

[Pdns-users] PowerDNS DNSdist 1.9.0-alpha3 released

/dnsdist-1.9.0-alpha3.tar.bz2 [11]: https://downloads.powerdns.com/releases/dnsdist-1.9.0-alpha3.tar.bz2.sig [12]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital signature

[Pdns-users] PowerDNS DNSdist 1.7.5 and 1.8.2 released

://downloads.powerdns.com/releases/dnsdist-1.7.5.tar.bz2 [7]: https://downloads.powerdns.com/releases/dnsdist-1.8.2.tar.bz2 [8]: https://downloads.powerdns.com/releases/dnsdist-1.7.5.tar.bz2.sig [9]: https://downloads.powerdns.com/releases/dnsdist-1.8.2.tar.bz2.sig [10]: https://repo.powerdns.com Best regards, -- Remi

Re: [Pdns-users] package build instructions

ificate file changes on disk. You can either use the console to issue a 'reloadAllCertificates()' command which will reload all certificates and keys without interruption, or restart dnsdist. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Desc

Re: [Pdns-users] DNSdist 1.9.0-alpha1 released dnsdist_server_healthcheckfailurestimeout

, that if the checkInterval is at 1sec and the server is down for 7seconds this counter will be at 7 or just at 1 if the downtime had no interruption? It should be at 7, since a health-check attempt will be done every second and the counter will be incremented for every failure. Best regards, -- Remi

[Pdns-users] PowerDNS DNSdist 1.9.0-alpha1 released

/issues/new/choose [6]: https://downloads.powerdns.com/releases/dnsdist-1.9.0-alpha1.tar.bz2 [7]: https://downloads.powerdns.com/releases/dnsdist-1.9.0-alpha1.tar.bz2.sig [8]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com

[Pdns-users] PowerDNS DNSdist 1.8.1 released

://repo.powerdns.com -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns

[Pdns-users] Third Release Candidate of PowerDNS DNSdist 1.8.0

Hello! We are very happy to release the third candidate of what will become dnsdist 1.8.0! This release contains fixes for several issues that were found in the second release candidate. - #12641: Use the correct source address when harvesting failed - #12639: Fix a race when a

[Pdns-users] Second Release Candidate of PowerDNS DNSdist 1.8.0

]: https://downloads.powerdns.com/releases/dnsdist-1.8.0-rc2.tar.bz2.sig [7]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature ___ Pdns-users mailing

[Pdns-users] First release candidate of dnsdist 1.8.0

/upgrade_guide.html#x-to-1-8-0 [8]: https://github.com/PowerDNS/pdns/issues/new/choose [9]: https://downloads.powerdns.com/releases/dnsdist-1.7.2.tar.bz2 [10]: https://downloads.powerdns.com/releases/dnsdist-1.7.2.tar.bz2.sig [11]: https://repo.powerdns.com -- Remi Gacogne PowerDNS.COM BV - https

Re: [Pdns-users] troubleshooting dnsdist -> recursor instability

that setting, or decreasing the maxInFlight value in the dnsdist configuration. [1]: https://dnsdist.org/reference/config.html#setVerboseHealthChecks [2]: https://docs.powerdns.com/recursor/settings.html#max-concurrent-requests-per-tcp-connection Best regards, -- Remi Gacogne PowerDNS.COM BV - https

Re: [Pdns-users] [dnsdist] Dnsdist not reading from the cache

: 24882 Insert Collisions: 24759 TTL Too Shorts: 0 Great! before i connect with dnsdist -l 127.0.0.1:5300 Right, that would have started a new dnsdist instance instead of connecting to the existing one, which explains why the counters were empty. Best regards, -- Remi Gacogne PowerDNS.COM BV

Re: [Pdns-users] [dnsdist] Dnsdist not reading from the cache

dnsdist -c and then issuing getPool("resolverTopnet"):getCache():printStats() is that correct? If so, would you mind sharing the output of dumpStats() as well? Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenP

Re: [Pdns-users] [dnsdist] Dnsdist not reading from the cache

to reproduce the issue, and what you do exactly to test whether the cache is working. -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users

Re: [Pdns-users] [EXT] RE: [EXTERNE]Re: [dnsdist] Dnsdist not reading from the cache

0 TTL Too Shorts: 0 before updating dnsdist from 1.5 to 1.7 i can see the values But how are you testing exactly? How are you sending the DNS queries during your test? -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital

Re: [Pdns-users] [dnsdist] Dnsdist not reading from the cache

immediately wrong after looking at your configuration. What makes you think caching is not working? -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users

[Pdns-users] dnsdist 1.7.2 released

://downloads.powerdns.com/releases/dnsdist-1.7.2.tar.bz2.sig [6]: https://repo.powerdns.com -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users

[Pdns-users] dnsdist 1.7.1 released

]: https://downloads.powerdns.com/releases/dnsdist-1.7.1.tar.bz2.sig [7]: https://repo.powerdns.com -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users

[Pdns-users] dnsdist 1.7.0 released

es/dnsdist-1.7.0.tar.bz2 [5]: https://downloads.powerdns.com/releases/dnsdist-1.7.0.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature __

Re: [Pdns-users] Recursor: Error writing TCP answer - broken pipe

ng TCP connections more aggressively when possible, but the real fix might be to lower the severity of that log message in the recursor. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital sig

[Pdns-users] First release release of dnsdist 1.7.0

://downloads.powerdns.com/releases/dnsdist-1.7.0-rc1.tar.bz2 [5]: hhttps://downloads.powerdns.com/releases/dnsdist-1.7.0-rc1.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature

[Pdns-users] Second beta release of dnsdist 1.7.0

]: https://github.com/PowerDNS/pdns/issues/new/choose [4]: https://downloads.powerdns.com/releases/dnsdist-1.7.0-beta2.tar.bz2 [5]: hhttps://downloads.powerdns.com/releases/dnsdist-1.7.0-beta2.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https

[Pdns-users] First beta release of dnsdist 1.7.0

/issues/new/choose [4]: https://downloads.powerdns.com/releases/dnsdist-1.7.0-beta1.tar.bz2 [5]: hhttps://downloads.powerdns.com/releases/dnsdist-1.7.0-beta1.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature

Re: [Pdns-users] resource-limits metrics

descriptors available to the recursor as a first step, and then trying to correlate the periods where that counter is increasing with a growth of others network-related counters. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP

[Pdns-users] Second alpha release of dnsdist 1.7.0

://downloads.powerdns.com/releases/dnsdist-1.7.0-alpha2.tar.bz2 [5]: hhttps://downloads.powerdns.com/releases/dnsdist-1.7.0-alpha2.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature

Re: [Pdns-users] SERVFAIL responses on malformed subdomain query

n it on nowadays. [1]: https://doc.powerdns.com/authoritative/settings.html#bit-dns Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-us

[Pdns-users] First alpha release of dnsdist 1.7.0

/choose [4]: https://downloads.powerdns.com/releases/dnsdist-1.7.0-alpha1.tar.bz2 [5]: hhttps://downloads.powerdns.com/releases/dnsdist-1.7.0-alpha1.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Descriptio

[Pdns-users] dnsdist 1.6.1 released

]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ OpenPGP_signature Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman

Re: [Pdns-users] Status of dnsdist 1.6.1

Hello! On 8/30/21 2:13 PM, labs--- via Pdns-users wrote: I tried the 1.6.0.38 version but the problem still exists. I can see that you backported the patch 29 days ago but the 1.6.0.38 package is dated 18th may 2021. Does this version really contain the patch? Perhaps there should be newer

Re: [Pdns-users] recursor: Possible bug in accepting / rejecting additional answers?

Hi, I think I have to clarify a bit here. The first question was why the recursor doesn't accept the A records from the delegated name server’s response. For the record I believe we are talking about this response, received from one of the servers returned in the delegation from one of the

Re: [Pdns-users] Status of dnsdist 1.6.1

Hi Oliver, On 8/27/21 5:36 PM, labs--- via Pdns-users wrote: there is a bug in handling notify packages in dnsdist which will be fixed in versions 1.6.1/.1.7: https://github.com/PowerDNS/pdns/pull/10419 I am longingly waiting for these releases because we use dnsdist in front of

Re: [Pdns-users] Injection Attacks Reloaded: Validating hostnames?

and SVCB records. I'm not really convinced it can be implemented at the stub resolver level either without breaking some applications. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ ___ Pdns-users mailing list Pdns-users@mail

[Pdns-users] dnsdist 1.6.0 released

dist.org [2]: https://dnsdist.org/changelog.html#change-1.6.0 [3]: https://github.com/PowerDNS/pdns/issues/new/choose [4]: https://downloads.powerdns.com/releases/dnsdist-1.6.0.tar.bz2 [5]: https://downloads.powerdns.com/releases/dnsdist-1.6.0.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ pgp38IoYo93XA.pgp Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

[Pdns-users] dnsdist 1.5.2 released

://downloads.powerdns.com/releases/dnsdist-1.5.2.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ pgpMmNiCxnf7h.pgp Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns

[Pdns-users] Second release candidate for dnsdist 1.6.0

/changelog.html#change-1.6.0-rc2 [3]: https://github.com/PowerDNS/pdns/issues/new/choose [4]: https://downloads.powerdns.com/releases/dnsdist-1.6.0-rc2.tar.bz2 [5]: https://downloads.powerdns.com/releases/dnsdist-1.6.0-rc2.tar.bz2.sig [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne

[Pdns-users] First release candidate for dnsdist 1.6.0

-1.6.0-rc1.tar.bz2 [5]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ pgpYU7a0IyAnR.pgp Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https

Re: [Pdns-users] ECS not using proxied client IP?

10303 Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] CPU consumption of pdns_recursor

Hi, On 4/6/21 6:25 PM, Nejedlo, Mark via Pdns-users wrote: On Tuesday, April 6, 2021 10:04 AM, Remi Gacogne wrote: On 4/6/21 4:18 PM, Nejedlo, Mark via Pdns-users wrote: Would additional distributor threads really cause additional worker CPU usage? That could happen if they have to fight

Re: [Pdns-users] CPU consumption of pdns_recursor

On 4/6/21 4:18 PM, Nejedlo, Mark via Pdns-users wrote: Would additional distributor threads really cause additional worker CPU usage? That could happen if they have to fight for the incoming socket. Do you have reuseport=yes in your configuration? Does the maintenance function block the

Re: [Pdns-users] CPU consumption of pdns_recursor

up a lab env, I certainly would try to use 4.4 or 4.5 (which is in beta) they both contain performance improvememnts. And then using the proxy protocol instead of XPF could be a huge improvement. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com

[Pdns-users] Third Alpha Release of DNSDist 1.6.0

, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ pgpDFfnq882UY.pgp Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

[Pdns-users] Second alpha release of dnsdist 1.6.0

ange-1.6.0-alpha2 [3]: https://github.com/PowerDNS/pdns/issues/new/choose [4]: https://downloads.powerdns.com/releases/dnsdist-1.6.0-alpha2.tar.bz2 [5]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ pgpUsv0IYBfQ0.pgp Description: OpenPGP digital

[Pdns-users] First alpha release of dnsdist 1.6.0

r their great work in this release, and in particular Stephane Bakhos, Georgeto, Matti Hiljanen, Nuitari, Sukhbir Singh and Mischan Toosarani-Hausberger! [1]: https://dnsdist.org [2]: https://dnsdist.org/changelog.html#change-1.6.0-alpha1 [3]: https://github.com/PowerDNS/pdns/issues/new/choose [4]: https://d

[Pdns-users] DNSDist 1.5.1 released

.tar.bz2 [4]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com

Re: [Pdns-users] PowerDNS Recursor build fails on openSUSE Tumbleweed/Factory (gcc 10)

oeder:branches:server:dns/pdns-recursor > > Is this an issue with newer gcc? It's an issue caused by Boost >= 1.73, see [1]. We should probably backport that patch, at least to 4.3.x, but we have not done so yet. [1]: https://github.com/PowerDNS/pdns/pull/9070 Best regards, -- Remi Gacogne PowerDNS.COM

[Pdns-users] dnsdist 1.5.0 released

-alpha-release-of-dnsdist-1-5-0/ [2]: https://dnsdist.org [3]: https://dnsdist.org/changelog.html#change-1.5.0 [4]: https://downloads.powerdns.com/releases/dnsdist-1.5.0.tar.bz2 [5]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc

[Pdns-users] Fourth release candidate for dnsdist 1.5.0

dependencies were available. [1]: https://github.com/PowerDNS/pdns/pull/9278 [2]: https://dnsdist.org [3]: https://dnsdist.org/changelog.html#change-1.5.0rc4 [4]: https://downloads.powerdns.com/releases/dnsdist-1.5.0-rc4.tar.bz2 [5]: https://repo.powerdns.com Best regards, -- Remi Gacogne

[Pdns-users] Third release candidate for dnsdist 1.5.0

[3]: https://dnsdist.org [4]: https://dnsdist.org/changelog.html#change-1.5.0rc3 [5]: https://downloads.powerdns.com/releases/dnsdist-1.5.0-rc3.tar.bz2 [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP

Re: [Pdns-users] why CAP_CHOWN?

hown() in the recursor is to update the ownership of the Unix domain control socket to the value defined by the "socket-owner" and "socket-group" settings. Therefore I don't think we need CAP_CHOWN if these are not set (which is the default). Best regards,

Re: [Pdns-users] recursor fail to resolve

but it does not look like it is doing that. >>>>>>> It seems like it is caching the failure and does not query again >>>>>>> at all >>>>>>> for a while. >>>>>>> I changed packetcache-servfail-ttl=0 and now it looks like after >>>>>>> the 3rd >

[Pdns-users] First release candidate for dnsdist 1.5.0

/changelog.html#change-1.5.0rc1 [5]: https://downloads.powerdns.com/releases/dnsdist-1.5.0-rc1.tar.bz2 [6]: https://repo.powerdns.com Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature

Re: [Pdns-users] servfail-packets>0 but no data in servfail-queries ring buffer

ld not parse. [1]: https://docs.powerdns.com/authoritative/settings.html#bit-dns Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mail

[Pdns-users] First alpha release of dnsdist 1.5.0

[2]: https://dnsdist.org/upgrade_guide.html#x-to-1-5-0 [3]: https://dnsdist.org [4]: https://dnsdist.org/changelog.html#change-1.5.0 [5]: https://downloads.powerdns.com/releases/dnsdist-1.5.0-alpha1.tar.bz2 Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc D

Re: [Pdns-users] dns update across dnsdist

ld you mind pasting your whole configuration? dnsdist doesn't add ECS by default, so something in your configuration must be enabling ECS addition somehow. [1]: https://github.com/PowerDNS/pdns/issues/8098 Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signatur

Re: [Pdns-users] dns update across dnsdist

capturing the packet leaving dnsdist toward the authoritative server to confirm that the TSIG key is still there? Your configuration does not require the addition of EDNS Client Subnet so dnsdist shouldn't be altering the packet at all, but it would be nice to know what the authoritative s

Re: [Pdns-users] pdns-recursor Permissions Error

mission denied"* I'm not sure of what your SNMP setup is, but it looks like the user invoking rec_control does not have the rights to create a new file in /var/run/pdns-recursor. What happens if you invoke the rec_control command directly as the 'pdns' user? Best regards, -- Remi Gacogne

Re: [Pdns-users] recursor is giving conflicting results for /etc/hosts entries

om etc/hosts', or perhaps this would be > a job better suited to a lua script (which I am not up to speed on)? I believe you are looking for addNTA(), see [1]. [1]: https://docs.powerdns.com/recursor/dnssec.html#negative-trust-anchors Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.pow

Re: [Pdns-users] TLSA problemns

gt; and will eventually become consistent. > > ___ > Pdns-users mailing list > Pdns-users@mailman.powerdns.com > https://mailman.powerdns.com/mailman/listinfo/pdns-users > -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

[Pdns-users] dnsdist 1.4.0 released

#change-1.4.0 [4]: https://downloads.powerdns.com/releases/dnsdist-1.4.0.tar.bz2 [5]: https://repo.powerdns.com/ Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users

[Pdns-users] dnsdist 1.4.0-rc5 released

.tar.bz2 [5]: https://repo.powerdns.com/ Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https

[Pdns-users] Fourth release candidate for dnsdist 1.4.0

website. Several packages are also available on our repository [4]. [1]: https://dnsdist.org [2]: https://dnsdist.org/changelog.html#change-1.4.0-rc4 [3]: https://downloads.powerdns.com/releases/dnsdist-1.4.0-rc4.tar.bz2 [4]: https://repo.powerdns.com/ -- Remi Gacogne PowerDNS.COM BV - https

[Pdns-users] Third release candidate for dnsdist 1.4.0

-1.4.0-rc3 [3]: https://downloads.powerdns.com/releases/dnsdist-1.4.0-rc3.tar.bz2 [4]: https://repo.powerdns.com/ Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users

Re: [Pdns-users] DNSDist checkInterval qustion

using 1.3.x or older. [1]: https://mailman.powerdns.com/mailman/listinfo/dnsdist Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdn

Re: [Pdns-users] DNSdist cache question

Hi, On 9/17/19 8:38 PM, Pedro David Marco via Pdns-users wrote: > i am new with DNSdist and it works like a charm... what a great software!   > > i have a doubt about its cache: > > I have set parameters newPacketCache with 86400, 0, 60,  60, true      > > The cache seems to work OK but it

[Pdns-users] Second release candidate for dnsdist 1.4.0

://downloads.powerdns.com/releases/dnsdist-1.4.0-rc2.tar.bz2 [4]: https://repo.powerdns.com/ Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users

[Pdns-users] First release candidate for dnsdist 1.4.0

#change-1.4.0-rc1 [3]: https://downloads.powerdns.com/releases/dnsdist-1.4.0-rc1.tar.bz2 [4]: https://repo.powerdns.com/ Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature

Re: [Pdns-users] dnsdist failed to compile on SmartOS

xed in 1.3.3 by [1], perhaps you could switch to 1.3.3? Otherwise, if you really need to stick to 1.3.2, you could apply this patch [2]. [1]: https://github.com/PowerDNS/pdns/pull/7092 [2]: https://github.com/PowerDNS/pdns/commit/d7a263770fea869e058e34c96d1319e30659feb9.patch Best regards, -- Remi Gacog

Re: [Pdns-users] What is required for the dnsdist testCrypto() function to work?

ion is that I'm > trying to get DoT working, so far without success. It's completely unrelated to testCrypto(), could you paste your configuration and explain what doesn't work? Please be aware that dnsdist has its own mailing-list, by the way :-) Best regards, -- Remi Gacogne Power

Re: [Pdns-users] specfic problem with efax.com

aps a future enhancement possibility? We used to try hard to be forgiving but this led to several issues, especially when DNSSEC was involved, so we tend to be more strict with regard to clear protocol violations. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ s

Re: [Pdns-users] specfic problem with efax.com

ork around with settings at my resolver? All three servers authoritative for efax.com reply to queries for efax.com or inbound.efax.com without the AA bit set, which is not valid. IMHO this needs to be fixed on efax.com's side. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com

[Pdns-users] dnsdist 1.4.0-beta1 released

regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] Recursor : Lua & udpQueryResponse questions

afraid we currently don't provide a way to interact with the record cache from Lua, so I don't think it's possible. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

[Pdns-users] dnsdist 1.4.0-alpha2 with DNS over HTTPS support released

repository [4]. [1]: https://dnsdist.org [2]: https://dnsdist.org/changelog.html#change-1.4.0-alpha2 [3]: https://downloads.powerdns.com/releases/dnsdist-1.4.0-alpha2.tar.bz2 [4]: https://repo.powerdns.com/ Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc

Re: [Pdns-users] AXFR error using dnsdist

ter')) Am I missing something or are you routing AXFR and IXFR queries to dnsdist itself, resulting in a loop? Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-u

Re: [Pdns-users] {Content?} Re: Recursor reply SRVFAIL from the first NS server and does not try other NS servers

at the trace would tell you exactly that. Best regards, Remi > > *From:* Pdns-users on behalf > of Remi Gacogne > *Sent:* Tuesday, April 9, 2019 11:14:02 AM > *To:* pdns-users@mailman.powerdns.com > *Subjec

Re: [Pdns-users] Recursor reply SRVFAIL from the first NS server and does not try other NS servers

us immediately by responding to this email and > then delete it from your system. The University is neither liable for > the proper and complete transmission of the information contained in > this communication nor for any delay in its receipt. > ~~~~~~ > >

Re: [Pdns-users] PDNS-Recursor cache and forwarding-all-queries

do that? If you want to forward everything to another server with some caching, please have a look at dnsdist instead. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature _

Re: [Pdns-users] PDNS recursor dnssec settings

have a look at https://doc.powerdns.com/recursor/dnssec.html#what-when if you haven't done so already. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing li

Re: [Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

a release shipped by Ubuntu is broken in many ways and should not be used by anyone. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list P

Re: [Pdns-users] pdns_recursor and records in additional section of replies

werDNS/pdns/pull/7307 [2]: https://github.com/PowerDNS/pdns/pull/7404 Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powe

Re: [Pdns-users] pdns_recursor and records in additional section of replies

t like pdns authoritative 4.1.x does not > generate additional sections anymore. Completely ignoring additional records would break zones that need glue records to resolve, at the very least. What are you trying to achieve? Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.po

[Pdns-users] PowerDNS Recursor 4.1.9 Released

/mailman/listinfo/pdns-users [9]: https://github.com/PowerDNS/pdns/issues/new Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users

Re: [Pdns-users] Disabling DNSUPDATE for *some* zones?

[1]: https://github.com/PowerDNS/pdns/issues/new Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] errno - 128 with mysql

emi brought up, MySQL >> errno 128 can mean a few things. >> >> Could you try to issues those MySQL queries by hand, when connecting >> with the exact same user/password that PowerDNS uses to connect? >> >> Frank Louwers >> Certified PowerDNS Consultant >

Re: [Pdns-users] errno - 128 with mysql

x one? [1]: https://github.com/PowerDNS/pdns/issues/5675 [2]: https://github.com/PowerDNS/pdns/pull/5820 Regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users maili

Re: [Pdns-users] NOTIFY response timeout value? (repeat NOTIFY slave error)

al after so I can ignore but I wonder if there may be setting >> to increase timeout? > ___ > Pdns-users mailing list > Pdns-users@mailman.powerdns.com > https://mailman.powerdns.com/mailman/listinfo/pdns-users -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] AXFR queued but not executing

, would you mind posting your whole configuration so we being to understand what's going on? Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pd

Re: [Pdns-users] PowerDNS recursor v4.0.9 gives dnssec validation bogus for this one domain, other sources says its fine

apoli.it is correctly resolved as insecure on recent versions. Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ signature.asc Description: OpenPGP digital signature ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com htt

[Pdns-users] dnsdist 1.3.3 released

cies were available. [1]: https://dnsdist.org [2]: https://dnsdist.org/changelog.html [3]: https://downloads.powerdns.com/releases/dnsdist-1.3.3.tar.bz2 [4]: https://repo.powerdns.com/ Best regards, -- Remi Gacogne PowerDNS.COM BV - https://www.powerdns.com/ si

  1   2   >