Re: [Pdns-users] Acheiving 40,000 QPS

2010-05-17 Thread bert hubert
On Mon, May 17, 2010 at 03:23:21PM +0800, Lee Standen wrote: Thanks for that information, Bert. I had seen the documentation before... perhaps I should provide some more information. Here are the options I'm using at the moment (I've tried several values):

Re: [Pdns-users] [recursor] Segmentation fault at startup

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 09:29:57AM +0200, Stephane Bortzmeyer wrote: % pdns_recursor % uname -a NetBSD golgoth 5.0.1 NetBSD 5.0.1 (GENERIC) #0: Thu Oct 1 15:46:16 CEST 2009 steph...@golgoth:/usr/obj/sys/arch/i386/compile/GENERIC i386 Hi

Re: [Pdns-users] [recursor] Segmentation fault at startup

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 10:18:43AM +0200, Stephane Bortzmeyer wrote: It was properly compiled but the Makefile contains a 'strip $(DESTDIR)/$(SBINDIR)/pdns_recursor' :-( Debugging the non-installed For installed binaries, this is common. OK, the ACL parsing is not robust enough. What is

Re: [Pdns-users] [recursor] Segmentation fault at startup

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 11:01:38AM +0200, Stephane Bortzmeyer wrote: [BTW, it would be better to do so on a ticketing system but I cannot find a way to create a new ticket in the PowerDNS Trac.] There is some anti-spam trickery: TO FILE BUGS, OR CHANGE THE WIKI, CLICK 'LOGIN' ABOVE, USERNAME

Re: [Pdns-users] [recursor] configure could be more user-friendly

2010-05-26 Thread bert hubert
Derek, Dave, Stephane, (a rare top-post!), your points are well understood, and will be addressed. The immediate reason that the pdns-recursor did not have full auto*, and is unlikely to get it, was the deep dissatisfaction we felt with this suite of programs. It turned out to be difficult to

Re: [Pdns-users] [recursor] configure could be more user-friendly

2010-05-26 Thread bert hubert
On Wed, May 26, 2010 at 10:15:34PM +0200, Stephane Bortzmeyer wrote: On Wed, May 26, 2010 at 07:57:13PM +0200, bert hubert bert.hub...@netherlabs.nl wrote a message of 85 lines which said: The immediate reason that the pdns-recursor did not have full auto*, and is unlikely to get

Re: [Pdns-users] Possible tcp listener issue

2010-05-30 Thread bert hubert
On Thu, May 20, 2010 at 11:12:29AM +0100, Simon Bedford wrote: This has happened a further twice in the last week, output sent off list, please let me know if you need any further information. Simon, Could you apply this patch: http://wiki.powerdns.com/trac/changeset/1623 And periodically

Re: [Pdns-users] multithreaded epoll_wait in PDNS

2010-06-06 Thread bert hubert
On Sun, Jun 06, 2010 at 06:40:18PM +0200, Christof Meerwald wrote: On Tue, 1 Jun 2010 16:12:45 -0500, Naked Short-Selling wrote: I read your post regarding multithreaded epoll_wait behavior on lkml a couple of months ago: http://lkml.org/lkml/2010/3/3/441 My understanding is that

Re: [Pdns-users] Slave zone just won't refresh....

2010-06-09 Thread bert hubert
Garry, 2.6.1 WKS WKS records are deprecated in [RFC 1123]. They serve no known useful function, except internally among LISP machines Normally we'd whip up an implementation just to have the issue go away, but it is a pretty weird record type too, containing a bitmap of protocols. Unknown

Re: [Pdns-users] Can't start powerdns web on port 80 when running pdns not as root

2010-06-10 Thread bert hubert
On Thu, Jun 10, 2010 at 08:32:00AM +0200, Thomas Mieslinger wrote: when I set the Webseverport to 80 and run powerdns as user a non root user then the powerdns fails to start with the message permisson denied. Powerdns seems to drop the root priviledges too early. Is someone willing to fix

Re: [Pdns-users] Possible tcp listener issue

2010-06-13 Thread bert hubert
On Mon, Jun 07, 2010 at 04:08:17PM +0100, Simon Bedford wrote: Simon, Could you apply this patch: http://wiki.powerdns.com/trac/changeset/1623 And periodically run 'rec_control get tcp-clients' ? Hi Bert, I have just returned from annual leave and began to look into this

Re: [Pdns-users] Possible tcp listener issue

2010-06-15 Thread bert hubert
On Tue, Jun 15, 2010 at 02:23:04PM +0100, Simon Bedford wrote: It contains some other exciting stuff too, and it appears to be stable for production use. I have now built a static package and installed to 2 of the 8 servers after testing in isolation, they appear to be running fine and I can

Re: [Pdns-users] IPv4/IPv6 nameserver preference by recursor?

2010-06-16 Thread bert hubert
On Tue, Jun 15, 2010 at 05:10:11PM -0600, Darren Gamble wrote: We just wanted to get some information on how the recursor behaves when presented with a NS record set containing both IPv6 and IPv4 addresses, and/or if a NS record name has both A and records. If there a preference by the

Re: [Pdns-users] PDNS Recursor and reverse lookup

2010-06-16 Thread bert hubert
On Wed, Jun 16, 2010 at 10:34:30AM +0200, Uroš Gruber wrote: Hi, here is result from one of IP Try adding -x to the command line. From the 'dig' manpage: 'The default query type is A, unless the -x option is supplied to indicate a reverse lookup.' [r...@host1 ~]#dig @91.185.194.202

Re: [Pdns-users] Possible tcp listener issue

2010-06-16 Thread bert hubert
On Wed, Jun 16, 2010 at 11:10:29AM +0100, Simon Bedford wrote: I have been running the 'get tcp-clients' every 5 mins in cron on both servers, one is very low 10 and fluctuates, the other is just growing and growing and is currently at 55, hope this info is of value for debug. Is there any

Re: [Pdns-users] Possible tcp listener issue

2010-06-18 Thread bert hubert
at 04:16:50PM +0200, bert hubert wrote: On Thu, Jun 17, 2010 at 03:14:39PM +0100, Simon Bedford wrote: Bert, its now climbing and not seeming to close any clients on both servers now, although one is much worse than the other, one is at 11 and the other is at 108 tcp-clients at the moment

[Pdns-users] PowerDNSSEC, PowerDNS @ ICANN38

2010-06-20 Thread bert hubert
Hi everybody, I'll be part of the 'DNSSEC Workgroup' over at ICANN in Brussels this coming week. There, I will present 'PowerDNSSEC' plus our vision of DNSSEC on the resolver side of large ISPs. More details can be found on http://brussels38.icann.org/node/12491 and you can even join in

Re: [Pdns-users] Possible tcp listener issue

2010-06-21 Thread bert hubert
Simon, the solution to your issue is almost certainly in http://wiki.powerdns.com/trac/changeset/1640 Even though you do not see the log messages, I'm pretty sure this is it. Bert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com

Re: [Pdns-users] Possible tcp listener issue

2010-06-23 Thread bert hubert
we made at least solves A bug just not your bug. Sent from my phone. - Reply message - From: Simon Bedford sbedf...@plus.net Date: Tue, Jun 22, 2010 09:44 Subject: [Pdns-users] Possible tcp listener issue To: bert hubert bert.hub...@netherlabs.nl Cc: pdns-users@mailman.powerdns.com

Re: [Pdns-users] Possible tcp listener issue

2010-06-23 Thread bert hubert
From: pdns-users-boun...@mailman.powerdns.com [pdns-users-boun...@mailman.powerdns.com] On Behalf Of bert hubert [bert.hub...@netherlabs.nl] Sent: 23 June 2010 12:47 To: Simon Bedford Cc: pdns-users@mailman.powerdns.com Subject: Re: [Pdns-users] Possible tcp listener issue Simon

Re: [Pdns-users] strange resolution problem

2010-06-25 Thread bert hubert
, you find that BIND and PowerDNS resolve about the same amount of domains correctly. There will be some domains that work well in PowerDNS and not in BIND and the other way around. So please ask 'register.it' to solve their nameserver. Kind regards, Bert Hubert PS: in powerdns recursor 3.3

Re: [Pdns-users] PDNS Timing Out

2010-07-27 Thread bert hubert
On Tue, Jul 27, 2010 at 04:49:19PM -0700, Brandon Lee wrote: Therefore, we turned on logging by setting the log level to 6 in the pdns.conf file and only on the master server we saw hundreds of queries like below being logged whereas on the slave server this was not happening.  Not sure

Re: [Pdns-users] Possible bug observed in PowerDNS Recursor 3.2.1

2010-08-05 Thread bert hubert
Briefly diving into this: On Thu, Aug 05, 2010 at 10:12:54AM -0400, Dave Sparro wrote: I see this all the time on BIND resolvers. The keys to the situation are: * Domain's old NS records have a relatively long TTL (from old auth. servers) * Domain owner changes auth. servers with registrar

[Pdns-users] tcp listener issue - hopefully fixed

2010-08-09 Thread bert hubert
[mailto:pdns-users-boun...@mailman.powerdns.com] On Behalf Of bert hubert Sent: Tuesday, July 06, 2010 9:01 AM To: Mike Cc: Brad Dameron; pdns-users@mailman.powerdns.com Subject: Re: [Pdns-users] Possible tcp listener issue The issue has now been reproduced on one of the PowerDNS servers

Re: [Pdns-users] crashes in bind backend on rediscover

2010-08-11 Thread bert hubert
On Wed, Aug 11, 2010 at 02:24:04PM +0100, Richard Poole wrote: We're seeing crashes in powerdns 2.9.22 when calling pdns_control rediscover. We have a cron job that does this, currently twice an hour, and on average about once a day it results in a crash, looking like this in

Re: [Pdns-users] MySQL backend and notify

2010-08-12 Thread bert hubert
On Thu, Aug 12, 2010 at 08:55:17AM +0200, Yves Goergen wrote: On 12.08.2010 08:28 CE(S)T, bert hubert wrote: If configured with 'master' in the configuration, it will periodically retrieve a list of all SOA serial numbers, and determine which ones changed. Does anybody know what time

Re: [Pdns-users] recursor resolv ERROR

2010-08-26 Thread bert hubert
On Thu, Aug 26, 2010 at 01:20:52PM +0400, Dmitry Rybin wrote: $ dig +short my.smsfeedback.ru @78.108.89.252 click.smsbliss.ru. $ dig +short click.smsbliss.ru @ns1.nameself.com 79.125.121.14 All fine, bind resolves this domain, unbound too, but pdns-recursor - not. It is broken. There are

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-08-29 Thread bert hubert
On Mon, Aug 23, 2010 at 11:37:42AM +0100, Simon Bedford wrote: Just returned from annual leave to this welcome news, has anyone had a chance to try it as yet and investigate whether the bug still manifests? And does it no longer happen when running Brad's test script? Simon, Sadly we found

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-08-29 Thread bert hubert
On Sun, Aug 29, 2010 at 04:56:14PM +0200, bert hubert wrote: We've fixed yet another bug that might be causing the issue, and we are currently testing that. This drop can be found on http://svn.powerdns.com/snapshots/pdns-recursor-3.3-pre.tar.bz2 Our testing shows that the problem

[Pdns-users] Some notes for Solaris 10 on x86 users of the PowerDNS Recursor

2010-08-30 Thread bert hubert
Hi, This message is for everyone using the PowerDNS Recursor with Solaris 10 on x86 (non-UltraSPARC) hardware. It turns out that Solaris 10 on x86 has some issues standing in the way of high performance for the PowerDNS Recursor. With some care, good results can be achieved however. If you need

Re: [Pdns-users] dns queries timeout on secondary IPs

2010-09-08 Thread bert hubert
On Wed, Sep 08, 2010 at 08:31:45PM +0300, George wrote: I have CentOS 5.5 and powerdns 2.9.21 set up as a slave server. My problem is that pdns does not reply to queries that come from outside on any secondary IP . Here's the full story: Can you run: grep local-address /etc/powerdns/pdns.conf

Re: [Pdns-users] dns queries timeout on secondary IPs

2010-09-08 Thread bert hubert
On Wed, Sep 08, 2010 at 08:44:01PM +0300, George wrote: Here are the outputs: [r...@webprod02 ~]# grep local-address /etc/pdns/pdns.conf # local-address Local IP addresses to which we bind local-address=0.0.0.0 (...) pdns[6269]: It is advised to bind to explicit addresses with the

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-09-08 Thread bert hubert
On Sun, Aug 29, 2010 at 09:17:01PM +, Brad Dameron wrote: The release process for 3.3 can now start - only 1 feature request left to finish. Good to hear Bert. I'll run it through the ringer on Monday and see if we can reproduce the problem. Cross fingers that it is fixed. Brad,

Re: [Pdns-users] Successful, yet incomplete AXFR to BIND9 slave

2010-09-08 Thread bert hubert
On Thu, Sep 09, 2010 at 12:10:53AM +0300, Nikolaos Milas wrote: Indeed, I have confirmed that pdns does not send a complete set of records during AXFR, by executing: # dig example.com AXFR @dns.example.com where dns.example.com is the pdns/ldap server. The output is exactly the

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-09-09 Thread bert hubert
save you an upgrade. Would this work for you? Bert. Sent from my phone. - Reply message - From: Simon Bedford sbedf...@plus.net Date: Mon, Sep 6, 2010 14:16 Subject: tcp listener issue - hopefully fixed To: bert hubert bert.hub...@netherlabs.nl Cc: Brad Dameron brad.dame

Re: [Pdns-users] PDNS-recursor-3.2 crashed under Solaris 10 (x86)

2010-09-10 Thread bert hubert
On Fri, Sep 10, 2010 at 10:20:07AM +0200, Christian Kuehn wrote: Hi, today I installed the Recursor 3.2 in a new Solaris 10 x86 and the process crashed immediately: Hi Christian, Sadly this is well known - see http://mailman.powerdns.com/pipermail/pdns-users/2010-August/006956.html

[Pdns-users] PowerDNS Recursor 3.3-RC1 released!

2010-09-11 Thread bert hubert
Dear PowerDNS community, PowerDNS Recursor 3.3 Release Candidate 1 is now available! It is in wide production use already, but we'd like everyone to take a good look at it before we release it as 3.3-final. If nothing crops up, RC1 will be the exact same as the 3.3 release. Tar, RPM Deb for 32

Re: [Pdns-users] PowerDNS (2.9.22) crash with signal 8 (floating point exception)

2010-09-11 Thread bert hubert
On Sat, Sep 11, 2010 at 06:43:08PM +0700, Dmitriy Lyfar wrote: Hi, I'm using pdns with my own backend. Previous version I've used was 2.9.21 (from centos repo) and my backend works fine. But we decided to move to last version (pdns-static, 2.9.22, x86_64) and it can't even run with my

[Pdns-users] PowerDNS Recursor 3.3-RC2 released!

2010-09-13 Thread bert hubert
Dear PowerDNS community, PowerDNS Recursor 3.3 Release Candidate 2 is now available! It is in wide production use already, but we'd like everyone to take a good look at it before we release it as 3.3-final. If nothing crops up, RC2 will be the exact same as the 3.3 release. RC1 had some

Re: [Pdns-users] pdns-recursor-3.3rc2 our root expired messages

2010-09-15 Thread bert hubert
On Wed, Sep 15, 2010 at 01:37:30PM +0200, Detlef Peeters wrote: pdns_recursor[32068]: objects-test.deviantart.com.edgesuite.net.: our root expired, repriming from hints and retrying pdns_recursor[32068]: s.de.net.: our root expired, repriming from hints and retrying Hi Detlef, Can you list

Re: [Pdns-users] pdns-recursor-3.3rc2 our root expired messages

2010-09-16 Thread bert hubert
Found it solved in http://wiki.powerdns.com/trac/changeset/1716 This issue is harmless, but it is good to have it solved for the 'real' release. Thanks for the vigilance! Bert On Wed, Sep 15, 2010 at 01:39:11PM +0200, bert hubert wrote: On Wed, Sep 15, 2010 at 01:37:30PM +0200, Detlef

Re: [Pdns-users] pdns recursor 3.2 cname resolution phenomenon

2010-09-19 Thread bert hubert
On Mon, Sep 20, 2010 at 07:32:51AM +0200, Thomas Mieslinger wrote: we're using pdns recursor for out company internal name resolution. We have some strange setups to support that can't easily be removed. In some of our offical Zones are CNAMEs. The A records to these Names are in our

Re: [Pdns-users] pdns-recursor-3.3rc2 cache is growing slow

2010-09-20 Thread bert hubert
Odd - can you paste some 'stats:' lines from the log files? stats: 4331362754 questions, 1003788 cache entries, 100987 negative entries, 27% cache hits stats: throttle map: 2752, ns speeds: 76672 stats: outpacket/query ratio 3205%, 2% throttled, 0 no-delegation drops stats: 263614

[Pdns-users] PowerDNS Recursor 3.3-RC3 released

2010-09-20 Thread bert hubert
Dear PowerDNS community, PowerDNS Recursor 3.3 Release Candidate 3 is now available! It is in wide production use already, but we'd like everyone to take a good look at it before we release it as 3.3-final. If nothing crops up, RC3 will be the exact same as the 3.3 release. RC1 had some

Re: [Pdns-users] PowerDNS Recursor 3.3-RC3 released

2010-09-21 Thread bert hubert
On Tue, Sep 21, 2010 at 11:08:33AM +0200, Detlef Peeters wrote: On Mon, 20 Sep 2010 20:22:40 +0200, bert hubert bert.hub...@netherlabs.nl wrote: PowerDNS Recursor 3.3 Release Candidate 3 is now available! It is in wide production use already, but we'd like everyone to take a good look

Re: [Pdns-users] pdns recursor 3.2 cname resolution phenomenon

2010-09-22 Thread bert hubert
Thomas, Please provide real domain names, otherwise I can't test. Kind regards, Bert Hubert On Wed, Sep 22, 2010 at 04:53:22PM +0200, Thomas Mieslinger wrote: On 09/20/10 07:53 AM, bert hubert wrote: On Mon, Sep 20, 2010 at 07:32:51AM +0200, Thomas Mieslinger wrote: we're using pdns

Re: [Pdns-users] pdns recursor 3.2 cname resolution phenomenon

2010-09-22 Thread bert hubert
you will get NXDomain and AUTHORTIY = 1, but internally db686.YYY.de is known. Would you add an option to try recursing cnames even if an answer has the authority bit set? Regards Thomas On 09/22/10 04:54 PM, bert hubert wrote: Thomas, Please provide real domain names, otherwise I

[Pdns-users] PowerDNS Recursor 3.3 released!

2010-09-22 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, We're proud to announce the release of the PowerDNS Recursor 3.3! It can be downloaded from http://www.powerdns.com/ or via the following direct links: http://downloads.powerdns.com/releases/pdns-recursor-3.3.tar.bz2

Re: [Pdns-users] PowerDNS recursor rrd change ?

2010-09-28 Thread bert hubert
Indeed. And for this purpose we have: http://doc.powerdns.com/recursor-stats.html ;-) This states: It should be noted that answers0-1 + answers1-10 + answers10-100 + answers100-1000 + packetcache-hits + over-capacity-drops = questions. You are currently missing the 'packetcache-hits'. The

Re: [Pdns-users] Pdns 2.9.22 stopped treating NOTIFY or manual retrieves when acting as slave

2010-10-04 Thread bert hubert
On Mon, Oct 04, 2010 at 02:09:16PM +0200, Florent Lerat wrote: We slave about 20 domains for most of which one of our 5 servers is the master. We are slave for 90 different masters. Some of those masters are indeed generating timeout or different types of error such as : - Query to

Re: [Pdns-users] Announcing JPower Admin

2010-10-12 Thread bert hubert
! Bert Hubert PowerDNS On Mon, Oct 11, 2010 at 03:36:35PM -0600, Jivko Sabev wrote: Greetings, I have released yet another control panel for Power DNS. Some of the key features include: - support for all Power DNS features - support for fancy records - built on an enterprise platform

Re: [Pdns-users] is it nessary to add soa record? I don't use axfr.

2010-11-10 Thread bert hubert
On Thu, Nov 11, 2010 at 12:05:26PM +0800, Xscape wrote: hi, I will manage one dns zone(or one domain) with pdns authoritative server (mysql backend). Is there any problems without soa record. SOA means 'start of authority'. Without SOA, there is no authority and no zone. So yes, it is

Re: [Pdns-users] PowerDNS Recursor additional Lua hooks for IPv6 DNS64 and Renumbering

2010-11-15 Thread bert hubert
On Sun, Nov 14, 2010 at 10:32:31PM +0100, bert hubert wrote: The PowerDNS Recursor is currently being extended with additional Lua hooks and extra infrastructure to support flexible DNS64 operations, plus perform on-the-fly IPv4 or IPv6 renumbering. (...) Known defects are: postresolve

Re: [Pdns-users] Cache Problems with upgrade to Recursor 3.3

2010-12-02 Thread bert hubert
On Wed, Dec 01, 2010 at 12:40:40PM -0600, Jeremy Utley wrote: load balancer which handles sharing the load between them. This implementation has been in place for about a year with no issues. We also use Cacti graphs for collecting performance data, by extending SNMP with output from the

Re: [Pdns-users] tcp listener issue - hopefully fixed

2010-12-02 Thread bert hubert
:04 To: bert hubert Cc: Mike; pdns-users@mailman.powerdns.com Subject: Re: [Pdns-users] tcp listener issue - hopefully fixed Bert, I re-downloaded the src and rebuilt my RPM. It appears to be up and running now. Unknown why the first compiles had this issue. I have been testing the last

[Pdns-users] PowerDNS Recursor: McAfee-related errors in your log files

2010-12-08 Thread bert hubert
; dr.d_label=label; dr.d_clen=ah.d_clen; Kind regards, Bert Hubert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] PowerDNS Recursor: McAfee-related errors in your log files

2010-12-08 Thread bert hubert
McAfee responded within minutes, and they are on the case. Thanks for the hint! Bert On Wed, Dec 08, 2010 at 09:05:24AM -0500, Curtis Maurand wrote: You might try posting a message to the nanog list. --Curtis On 12/8/2010 7:43 AM, bert hubert wrote: Dear PowerDNS Recursor users

Re: [Pdns-users] [Recursor] Resolving large RRsets

2010-12-13 Thread bert hubert
On Mon, Dec 13, 2010 at 09:35:47AM +0100, Stephane Bortzmeyer wrote: On Mon, Dec 13, 2010 at 09:30:18AM +0100, bert hubert bert.hub...@netherlabs.nl wrote a message of 286 lines which said: Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: truncated bit set, retrying via TCP

Re: [Pdns-users] pdns-recursor doesnt connect to dns root servers

2010-12-21 Thread bert hubert
On Tue, Dec 21, 2010 at 06:24:56PM +0100, Florian Krolikowski wrote: Hi Bert! Here the requested tcpdump. I hope it is meaningful for you. Thanks a lot for your help. Hi Florian, It appears that there is no PowerDNS issue - PowerDNS is sending correct root priming queries, but getting no

Re: [Pdns-users] Pramod Bodla wants to stay in touch on LinkedIn

2010-12-22 Thread bert hubert
Please everybody do not respond ;-) On Wed, Dec 22, 2010 at 04:49:11AM +, Pramod Bodla wrote: LinkedIn I'd like to add you to my professional network on LinkedIn. - Pramod Bodla Pramod Bodla Senior Soft ware Engineer at Kodiak Networks Bengaluru Area, India

Re: [Pdns-users] redirect a search for one site to another site

2010-12-25 Thread bert hubert
On Sat, Dec 25, 2010 at 05:13:47PM -0500, Morgan Osborne wrote: The first is 'red.com' with a record type of 'CNAME' and content of 'blue.com' , then the second record is 'blue.com' with a record type of 'A' and the correct IP address of '150.145.15.1' So now when I do a http search for

Re: [Pdns-users] pdns recursor do not always use records in /etc/hosts

2010-12-28 Thread bert hubert
On Wed, Dec 29, 2010 at 03:20:13PM +0800, Conan wrote: We know the option export-etc-hosts=on will export records from /etc/hosts to pdns recursor. But I found the records are not always available. Hi Conan, The export-etc-hosts feature is not meant to override the internet, but to supplement

Re: [Pdns-users] DNS Requirements - Packet Type Allowance/Responses/Settings

2011-01-03 Thread bert hubert
On Mon, Jan 03, 2011 at 02:27:22PM -0500, Morgan Osborne wrote: Does anyone have a specific list of the required packet types (and response settings) needed for DNS servers to fully operate on the net? I know UDP is a must, but more to the point, are ICMP (ping, tracert) responses

[Pdns-users] PowerDNSSEC Progress: ready for a first look

2011-01-06 Thread bert hubert
Dear PowerDNS Community, With the help of many of you, we've now brought 'PowerDNSSEC' to the point where it might make sense for you to trial it on test domains. We expect to make move some of our own important domains over to PowerDNSSEC early next week. PowerDNS.COM underlies the commercial

Re: [Pdns-users] Changing replies from PowerDNS

2011-01-10 Thread bert hubert
Hi 'abcdef ghijkl' with your newsubdomain.domain.com on dns.comain.com, I'm afraid I can't help you this way. Please provide real domain names and IP addresses. You might want to consider upgrading to 2.9.22. Bert On Mon, Jan 10, 2011 at 01:00:46PM +0100, abcdef ghijkl wrote: Hello

Re: [Pdns-users] problem with one specific dns name

2011-01-18 Thread bert hubert
On Tue, Jan 18, 2011 at 11:12:19AM -0800, dialsc wrote: www.vggr.ch has been registered as a cname record pointing to vggr.ch which is an A type record. randomly one or more powerdns servers are unable to resolve www.vggr.ch. once i restart the recursor of the server having this problem,

Re: [Pdns-users] Recursor: Different answers for the same query

2011-01-26 Thread bert hubert
On Wed, Jan 26, 2011 at 10:32:19AM +0100, Christian Kuehn wrote: any idea why the pdns-recursor 3.3 gives different answers to the same query?? Hello!! ;-) You probably run with threads=2, and one of the threads has had problems resolving cecilmen.se, and the other hasn't. 3.3.1 which will be

Re: [Pdns-users] New PowerDNS Authoritative Server snapshot with DNSSEC + Release Notes

2011-01-28 Thread bert hubert
On Fri, Jan 28, 2011 at 12:27:13AM +0100, Detlef Peeters wrote: On 27.01.2011 23:37, bert hubert wrote: (the short version, there is a snapshot worth looking at, packages on http://powerdnssec.org/downloads - documentation on http://powerdnssec.org ) I have upgraded to the snapshot

Re: [Pdns-users] New PowerDNS Authoritative Server snapshot with DNSSEC + Release Notes

2011-01-29 Thread bert hubert
On Sat, Jan 29, 2011 at 10:30:47AM +0100, Christof Meerwald wrote: On Sat, 29 Jan 2011 00:38:12 +0100, Christof Meerwald wrote: That's really excellent news - I have just migrated my 2 nameservers to SVN revision 1928 and signed one of the zones (btw, the setup is: master using bind backend

Re: [Pdns-users] DNSSEC and Master/Slave setup

2011-02-03 Thread bert hubert
On Thu, Feb 03, 2011 at 08:44:08AM +0100, Christof Meerwald wrote: I kind of expected this to happen today - the master (ns.cmeerw.net) with the keying material has now updated the RRSIG records, but the slave (ns2.cmeerw.net, no keying material) still returns the old RRSIG records: Indeed,

Re: [Pdns-users] signingpipe.hh not in snapshot 1964

2011-02-03 Thread bert hubert
On Thu, Feb 03, 2011 at 09:25:04PM +0100, M Techter wrote: being interested in DNSSEC support of pdns, I tried to build from the pdns-3.0-pre.20110202.1964 Good catch - we fixed the issue in SVN already. Meanwhile,

Re: [Pdns-users] PDNS Recursor on Debian / Low performance !!!URGENT!!!!

2011-02-07 Thread bert hubert
On Mon, Feb 07, 2011 at 09:17:29AM +, Maroon Ibrahim wrote: As for the file descriptors, I already added the following: - in sysctl.conf : fs.file-max = 65535 - in /etc/init.d/pdns-recursor #!/bin/sh # chkconfig: - 80 75 # description: pdns_recursor is a versatile high

Re: [Pdns-users] AXFR problem with pdns snapshots

2011-02-07 Thread bert hubert
On Mon, Feb 07, 2011 at 10:24:53PM +0100, Christof Meerwald wrote: Ok, think I have found it - Microsoft DNS doesn't seem to like the EDNS options in the AXFR packets. Guess that's why it says WRONG in tcpreceiver.cc, line 410... Our EDNS-in-AXFR has been brought in line with RFC 5936 now. I

Re: [Pdns-users] query on --out-of-zone-additional-processing

2011-02-11 Thread bert hubert
On Fri, Feb 11, 2011 at 10:32:45AM +, Tom Boland wrote: Do out of zone additional processing. This means that if a malicious user adds a '.com' zone to your server, it is not used for other domains and will not contaminate answers. Do not enable this setting if you run a public

[Pdns-users] PowerDNS Tickets are being processed, please check the status of yours

2011-02-14 Thread bert hubert
Dear PowerDNS users, As of yesterday, 103 tickets were open in the PowerDNS bugtracker, available on http://wiki.powerdns.com/trac/report/1 Today, 87 are left. As most tickets have been filed anonymously, if you ever created one, please check our timeline on

Re: [Pdns-users] PowerDNS and pgbouncer

2011-02-14 Thread bert hubert
On Mon, Feb 14, 2011 at 02:45:43PM -0600, Mark Felder wrote: Is there any connection pooling work done by PowerDNS that would negate any possible performance benefits of pgbouncer? Hi Mark, During typical PowerDNS operation, you will see a number over very longlived database connections, plus

Re: [Pdns-users] Zone transfer MX record issue

2011-02-20 Thread bert hubert
On Mon, Feb 21, 2011 at 02:15:26PM +0800, p8x wrote: zone transfer from the primary PowerDNS seems to mangle the records slightly replacing occurrences of the domain with an @ in some cases. This seems to work for all of the records except for the MX record. As an example, here is a copy of

Re: [Pdns-users] stuck tcp sessions on recursor

2011-02-24 Thread bert hubert
On Thu, Feb 24, 2011 at 01:33:24PM -0500, Charles Sprickman wrote: Simon Bedford, Brad Dameron and Laurient Papier discovered relatively high TCP/IP loads could cause TCP/IP service to shut down over time. Addressed in commits 1546, 1640, 1652, 1685, 1698. Additional information provided by

Re: [Pdns-users] stuck tcp sessions on recursor

2011-02-24 Thread bert hubert
On Thu, Feb 24, 2011 at 03:06:12PM -0500, Charles Sprickman wrote: this definitely sounds like 3.3 material! So far so good, nearly 500,000 tcp queries without any lingering sockets. Good! Totally unrelated, but I see a stat that's not mentioned in the docs: no-packet-error 492682. What

Re: [Pdns-users] Format of private keys in PowerDNSSEC (gmysql) doesn't correspond to BIND's

2011-03-03 Thread bert hubert
On Thu, Feb 24, 2011 at 05:44:01PM +0100, Maik Zumstrull wrote: As noted in the comment, I'm not sure whether this small error is on PDNS' part or in ldns, but an example in RFC 5702 suggests BIND's format is correct. As far as I can tell, this private key format has no formal

Re: [Pdns-users] authoritative server freezes while processing NOTIFYs

2011-03-03 Thread bert hubert
On Wed, Feb 16, 2011 at 10:53:05AM +, Richard Poole wrote: We have a setup with a non-public master and two publicly visible slaves. All three servers are using the bind backend. Sometimes we need to change many zones, say about 2000, at the same time, causing the master to send out 2000

Re: [Pdns-users] Malformed messages when not in cache

2011-03-05 Thread bert hubert
On Fri, Mar 04, 2011 at 07:38:36PM -0500, Kevin O'Connor wrote: We have a record set up with the BIND backend as follows: testing IN CNAME gci-prod-lb-0.us-east-1.elb.amazonaws.com. When you query it right after a service restart, you get: Wow, that is weird.

Re: [Pdns-users] Mongo DB and Powerdns

2011-03-15 Thread bert hubert
On Mon, Mar 14, 2011 at 07:34:15PM +0100, Jan-Piet Mens wrote: To my knowledge there is no such back-end. What I have done is a PowerDNS pipe back-end to CouchDB. Performance is lousy of course, but I did it as a proof of concept, and it works ok. I've written about it at If the performance is

Re: [Pdns-users] pdns-server, DNS-SD and \032 in record labels

2011-03-18 Thread bert hubert
On Fri, Mar 18, 2011 at 09:33:39PM +, Andy Smith wrote: So it seems to me that there are multiple places here that can't handle \032 in a query name or in a record label. Just changing backend is not going to get this working for me, right? Andy, Can you try to reproduce the issue with

Re: [Pdns-users] [gmysql] How about add CLIENT_MULTI_RESULTS to smysql.cc ?

2011-03-22 Thread bert hubert
On Mon, Mar 21, 2011 at 08:35:15AM +0100, Sandro Tosi wrote: Anyone has comment on this patch? Is there a better place I can send it for review and (possible) inclusion? Hi Sandro, It has been added to revision 2084, which can be downloaded from http://powerdnssec.org/snapshots/ It will also

[Pdns-users] Heading up to PowerDNS Authoritative Server release 3.0: please check your open tickets

2011-03-22 Thread bert hubert
invalid: --fork is gone in recent versions Ticket #305 (Disable a zone / domain / record) closed by ahu wontfix: To do this, please customize the SQL queries to have an 'active' field. Kind regards, Bert Hubert ___ Pdns-users mailing list Pdns-users

[Pdns-users] Status of the LDAP backend in 3.0 release

2011-03-23 Thread bert hubert
, Bert Hubert PowerDNS ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users

[Pdns-users] SOA serial number editing on re-signing of a zone / RRSIG changes

2011-03-27 Thread bert hubert
On Wed, Mar 23, 2011 at 12:39:42AM +0100, Christof Meerwald wrote: Just wanted to check what the status is on having a PowerDNS master with a non-PowerDNS slave for DNSSEC signed zone - we had briefly discussed this some time ago and I think the slave (if it's not PowerDNS) currently won't do

Re: [Pdns-users] current svn crushes...

2011-03-30 Thread bert hubert
On Wed, Mar 30, 2011 at 02:36:14PM +0400, Vasiliy G Tolstov wrote: I'm build current svn trunk, something work's fine, but sometimes i get this error: Hi Vasiliy, Can you verify that the crash always starts: pdns[28785]: /usr/sbin/pdns_server-instance(_ZN11GSQLBackend8setFreshEj +0x73)

[Pdns-users] probably fixed Re: current svn crushes...

2011-03-31 Thread bert hubert
On Wed, Mar 30, 2011 at 02:59:34PM +0400, Vasiliy G Tolstov wrote: If it doesn't always start there, can you paste some other traces? Thanks! pdns[31390]: /usr/sbin/pdns_server-instance(_ZN17CommunicatorClass12slaveRefreshEP13PacketHandler+0x1a8b) [0x8169c2b] Mar 30 14:52:25 monitoring

Re: [Pdns-users] error notify master to itself with it's own zone

2011-03-31 Thread bert hubert
On Thu, Mar 31, 2011 at 12:10:00PM +0400, Vasiliy G Tolstov wrote: Another problem (may be not related to current trunk..) Received NOTIFY for clodo.ru from 188.127.236.4 which is not a master But pdns on 188.127.236.4 already master for zone clodo.ru ? Why this happened? This is a master

Re: [Pdns-users] Status of the LDAP backend in 3.0 release

2011-04-03 Thread bert hubert
On Sun, Apr 03, 2011 at 11:44:56PM +0200, Udo Rader wrote: Before promising something I can't keep: yes, I will give my best to fix the issues above and if things go well, it is not unlikely that either I myself or one of our developers will invest some more time into enhancements, but one

Re: [Pdns-users] release date for pdns 3?

2011-04-03 Thread bert hubert
On Sun, Apr 03, 2011 at 09:57:47PM +0400, Vasiliy G Tolstov wrote: Hello. Where i can find release date for powerdns 3 ? roadmap in wiki says nothing... The open source plan is always to release when ready ;-) Tomorrow (Monday) will see RC1, I expect three subsequent releases (RC2, RC3 and

[Pdns-users] PowerDNS Authoritative Server 3.0 Release Candidate 1 available

2011-04-04 Thread bert hubert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, Release Candidate 1 of the PowerDNS Authoritative Server 3.0 is available from: http://powerdnssec.org/downloads/pdns-3.0-rc1.tar.gz http://powerdnssec.org/downloads/packages/pdns-static-3.0rc1-1.i386.rpm

Re: [Pdns-users] PowerDNS Authoritative Server 3.0 Release Candidate 1 available

2011-04-05 Thread bert hubert
/ Regards, Kees On 4-4-2011 16:50, bert hubert wrote: Hi everybody, Release Candidate 1 of the PowerDNS Authoritative Server 3.0 is available from: http://powerdnssec.org/downloads/pdns-3.0-rc1.tar.gz http://powerdnssec.org/downloads/packages/pdns-static-3.0rc1-1.i386.rpm http

Re: [Pdns-users] General DNS questions...

2011-04-08 Thread bert hubert
On Thu, Apr 07, 2011 at 10:14:31PM -0400, Mohamed Lrhazi wrote: I hope you guys don't mind a couple of non pdns specific questions... For once ;-) - When you declare 2 or 3 NS records for your domain, does the order of those names correlate with their usage? by that I mean can I expect a

Re: [Pdns-users] Recursor v3.2 and v3.3 malformed answer in case of big response from authoritative

2011-04-11 Thread bert hubert
On Mon, Apr 11, 2011 at 04:53:16PM +0200, Thor Spruyt wrote: Last week I discovered an issue with recursor v3.2. This is probably fixed in 3.3.1: Discovered by John J and Robin J, the PowerDNS Recursor did not process packets that were truncated in mid-record, and also did not act on the

Re: [Pdns-users] Recursor v3.2 and v3.3 malformed answer in case of big response from authoritative

2011-04-12 Thread bert hubert
On Mon, Apr 11, 2011 at 05:11:41PM +0200, bert hubert wrote: On Mon, Apr 11, 2011 at 04:53:16PM +0200, Thor Spruyt wrote: Last week I discovered an issue with recursor v3.2. Hi Thor, Thanks! You've uncovered an interesting bug which was quite devious. It has been solved in http

Re: [Pdns-users] pdns_recursor 3.3-hooks ... possible cache issue

2011-04-13 Thread bert hubert
On Wed, Apr 13, 2011 at 11:53:35AM -0700, Alfred B. M. Cordero wrote: Using the postresolve hook in lua to alter TTL that are too low. I log queries that hit the lua code and I see log events for that same host that occur within the same one second period and sometimes within a few or more

Re: [Pdns-users] pdns_recursor 3.3-hooks ... possible cache issue

2011-04-14 Thread bert hubert
On Thu, Apr 14, 2011 at 09:40:58AM -0700, Alfred B. M. Cordero wrote: On Wed, 13 Apr 2011 12:11:34 -0700 bert hubert bert.hub...@netherlabs.nl wrote: Try reproducing with 'threads=1'. You may be seeing hits from multiple separate caches. You are telling me that each thread maintains its

<    1   2   3   4   5   6   7   8   9   >