Re: [Pdns-users] DDNS with TSIG not working, need assistance

2016-11-14 Thread MRob
On 2016-11-13 21:21, Aki Tuomi wrote: On Sun, Nov 13, 2016 at 05:56:50PM -0800, mro...@insiberia.net wrote: I'm having a hard time knowing how to debug this message: Packet for domain 'local.' denied: can't find TSIG key with name 'tsig.key.local.' and algorithm 'hmac-sha512.' Is that a small

Re: [Pdns-users] Authority not refreshing stale mysql connections?

2016-11-24 Thread MRob
On 2016-11-24 12:49, bert hubert wrote: MRob, It is tremendously helpful if you let us know which version of PowerDNS you are running and on which platform. We are aware of some versions of PowerDNS having this issue but we need to know what you are running. I'm sorry I left that out. I

[Pdns-users] Authority not refreshing stale mysql connections?

2016-11-24 Thread MRob
I have a mysql-backed authority set up locally serving the internal LAN domain on a test platform (very lightly used at the moment). It appears that after some time (hours), the DB connection goes stale and queries return with dig reporting status SERVFAIL. If I wait (not sure how long, but I

Re: [Pdns-users] Error with rec_control reload

2018-05-07 Thread MRob
On 2018-05-07 06:50, Aki Tuomi wrote: On 07.05.2018 09:48, MRob wrote: Hi can anyone explain what this means and if it is important or can be ignored? I only find unanswered mailing list posts about it. $ sudo rec_control reload-lua-script pdns_recursor: Error dealing with control socket

[Pdns-users] Error with rec_control reload

2018-05-07 Thread MRob
Hi can anyone explain what this means and if it is important or can be ignored? I only find unanswered mailing list posts about it. $ sudo rec_control reload-lua-script pdns_recursor: Error dealing with control socket request: Unable to send message over control channel '/var/run/lsockl2eLnQ':

Re: [Pdns-users] Error with rec_control reload

2018-05-07 Thread MRob
On 2018-05-07 09:19, Remi Gacogne wrote: On 05/07/2018 11:02 AM, Aki Tuomi wrote: Can you run sudo strace -econnect,bind rec_control reload-lua-script and post the result? yes, thanks for your help bind(3, {sa_family=AF_LOCAL, sun_path="/var/run/lsock6hPxMw"}, 110) = 0 connect(3,

Re: [Pdns-users] How to reload RPZ from file?

2018-05-07 Thread MRob
On 2018-04-28 21:25, MRob wrote: On 2018-04-18 01:04, MRob wrote: With: rpzFile("dblfilename", {defpol=Policy.Custom, defcontent="badserver.example.com"}) Is there a 'nice' way to make Recursor reload this file? Does rec_control reload-zones do it? Must I restart recursor?

Re: [Pdns-users] Error with rec_control reload

2018-05-07 Thread MRob
On 2018-05-07 07:16, Aki Tuomi wrote: On 07.05.2018 09:58, MRob wrote: On 2018-05-07 06:50, Aki Tuomi wrote: On 07.05.2018 09:48, MRob wrote: Hi can anyone explain what this means and if it is important or can be ignored? I only find unanswered mailing list posts about it. $ sudo

Re: [Pdns-users] How to reload RPZ from file?

2018-04-28 Thread MRob
On 2018-04-18 01:04, MRob wrote: With: rpzFile("dblfilename", {defpol=Policy.Custom, defcontent="badserver.example.com"}) Is there a 'nice' way to make Recursor reload this file? Does rec_control reload-zones do it? Must I restart recursor? `rec_control reload-zones` didn't

Re: [Pdns-users] dp.variable when changing RPZ policy action?

2018-04-17 Thread MRob
On 2018-04-17 05:42, MRob wrote: PowerDNS blog recommends setting dq.variable when a domain response is part of the loaded block list. https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But this example for modifying policy actions does not set

[Pdns-users] dp.variable when changing RPZ policy action?

2018-04-16 Thread MRob
PowerDNS blog recommends setting dq.variable when a domain response is part of the loaded block list. https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But this example for modifying policy actions does not set dq.variable:

Re: [Pdns-users] Lua control of config settings?

2018-04-16 Thread MRob
On 2018-04-16 10:55, MRob wrote: On 2018-04-16 10:09, Remi Gacogne wrote: On 04/16/2018 12:03 PM, MRob wrote: According to this, you *should* be able to load a million domains into LUA without problem.  That's the same method this person said crashed recursor with much less https

Re: [Pdns-users] How to make Policy.NODATA response in policy zone?

2018-04-16 Thread MRob
On 2018-04-16 11:40, bert hubert wrote: On Mon, Apr 16, 2018 at 11:33:17AM +, MRob wrote: I can make NXDOMAIN applied policy for a domain in policy zone with this: example.com CNAME . But how to cause NODATA response? Hello "MRob", We recommend that you read the documentatio

[Pdns-users] How to make Policy.NODATA response in policy zone?

2018-04-16 Thread MRob
I can make NXDOMAIN applied policy for a domain in policy zone with this: example.com CNAME . But how to cause NODATA response? ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

[Pdns-users] Lua control of config settings?

2018-04-15 Thread MRob
I read about how recursor can be used to block queries for tracking domains: https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But I also read it chokes recursor if the list is many thousands domains:

[Pdns-users] Lua errors finding global objects in recent version

2018-04-15 Thread MRob
I have strange errors in LUA script like this: Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL Exception: [string "chunk"]:2: attempt to call global 'pdnslog' (a nil value) Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL Exception: [string

Re: [Pdns-users] Lua control of config settings?

2018-04-15 Thread MRob
On 2018-04-15 21:08, MRob wrote: I read about how recursor can be used to block queries for tracking domains: https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ But I also read it chokes recursor if the list is many thousands domains: https

Re: [Pdns-users] Lua control of config settings?

2018-04-17 Thread MRob
On 2018-04-17 05:24, MRob wrote: On 2018-04-16 10:55, MRob wrote: On 2018-04-16 10:09, Remi Gacogne wrote: On 04/16/2018 12:03 PM, MRob wrote: According to this, you *should* be able to load a million domains into LUA without problem.  That's the same method this person said crashed

Re: [Pdns-users] Lua control of config settings?

2018-04-16 Thread MRob
On 2018-04-16 10:09, Remi Gacogne wrote: On 04/16/2018 12:03 PM, MRob wrote: According to this, you *should* be able to load a million domains into LUA without problem.  That's the same method this person said crashed recursor with much less https://git.mauras.ch/Various

[Pdns-users] How to reload RPZ from file?

2018-04-17 Thread MRob
With: rpzFile("dblfilename", {defpol=Policy.Custom, defcontent="badserver.example.com"}) Is there a 'nice' way to make Recursor reload this file? Does rec_control reload-zones do it? Must I restart recursor? ___ Pdns-users mailing list

Re: [Pdns-users] Lua control of config settings?

2018-04-16 Thread MRob
On 2018-04-16 07:01, Brian Candler wrote: On 15/04/2018 22:08, MRob wrote: I read about how recursor can be used to block queries for tracking domains: https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/ You may find this interesting: https

Re: [Pdns-users] Lua errors finding global objects in recent version

2018-04-16 Thread MRob
On 2018-04-16 07:45, Remi Gacogne wrote: Hi, On 04/16/2018 01:41 AM, MRob wrote: I have strange errors in LUA script like this: Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL Exception: [string "chunk"]:2: attempt to call global 'pdnslog' (a nil value) Unab

[Pdns-users] Increment SOA programmatically?

2018-11-03 Thread MRob
I use mysql backend and SOA serial set to 0 in datebase for auto-serial features. But sometime come occasion we must update one record in database directly, not using DNSUPDATE. In this case how to tell pdns please update SOA serial? I cant find pdns_control, pdnsutil command for this.

Re: [Pdns-users] Increment SOA programmatically?

2018-11-05 Thread MRob
On 2018-11-05 10:57, Torsten Hantzsche wrote: On Sun, 4 Nov 2018, MRob wrote: I use mysql backend and SOA serial set to 0 in datebase for auto-serial features. But sometime come occasion we must update one record in database directly, not using DNSUPDATE. In this case how to tell pdns

Re: [Pdns-users] Increment SOA programmatically?

2018-11-05 Thread MRob
On 2018-11-05 16:49, Nico CARTRON wrote: Hi MRob, On 05-nov-2018 17:34 CET, wrote: On 2018-11-05 10:57, Torsten Hantzsche wrote: > On Sun, 4 Nov 2018, MRob wrote: > > > > I use mysql backend and SOA serial set to 0 in datebase for > > auto-serial features. But sometime

Re: [Pdns-users] pdnsutil increase-serial not working for mysql with autoserial

2018-11-07 Thread MRob
in fact after reboot looks like old serial is lost for all domains. why is change_date not kept up to date? all domains have it to be NULL, I think its where the serial is derived from when using autoserial On 2018-11-07 20:18, MRob wrote: Please some help for this? Looks like pdnsutil

[Pdns-users] pdnsutil increase-serial not working for mysql with autoserial

2018-11-07 Thread MRob
Please some help for this? Looks like pdnsutil increase-serial not made to work for mysql backend with autoserial, so how to programmatically request increase serial? pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'): missing field at the end

Re: [Pdns-users] Increment SOA programmatically?

2018-11-06 Thread MRob
So... any to help on this below keeping in mind I use autoserial? I use mysql backend and SOA serial set to 0 in datebase for auto-serial features. But sometime come occasion we must update one record in database directly, not using DNSUPDATE. In this case how to tell pdns please update SOA

Re: [Pdns-users] Increment SOA programmatically?

2018-11-06 Thread MRob
On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote: On 11/5/2018 9:15 AM, MRob wrote: still, it didn't work with auto-serial configuration: > pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'): missing field at the end of record cont

Re: [Pdns-users] NOTIFY response timeout value? (repeat NOTIFY slave error)

2018-12-11 Thread MRob
On 2018-12-11 16:03, Remi Gacogne wrote: On 12/7/18 6:10 PM, MRob wrote: NOTIFY 3sec timeout is hardcoded? ANyone please confirm? At a quick glance, it looks like the first attempt has a 3s timeout, the second one 5s, the third one 9s and the last one 17s: https://github.com/PowerDNS/pdns

[Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com

Re: [Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
On 2018-11-30 16:55, MRob wrote: I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? I should say original there was a error on the slave which fixed and restarted pdns. slave-cycle-interval

Re: [Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
On 2018-11-30 17:22, MRob wrote: On 2018-11-30 16:55, MRob wrote: I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? I should say original there was a error on the slave which fixed

Re: [Pdns-users] pipe backend logging

2018-11-30 Thread MRob
On 2018-11-30 19:37, Randall Diffenderfer via Pdns-users wrote: using centos rpm for powerdns, version 3.4.11 (this would seem to be old, but it's what they supply). you can update just use pdns repo to save headaches https://repo.powerdns.com/ ___

Re: [Pdns-users] pipe backend logging

2018-11-30 Thread MRob
: x86_64 Version : 1.0.5 Thats out of deate. Probably to ask somewhere why you are not pulling newest epel packaging. Release : 1.el7 Size: 350 k Repo: installed From repo : epel Summary : The Sodium crypto library URL : http://libsodium.org/ On

Re: [Pdns-users] How to understand cause of rejected notify

2018-12-01 Thread MRob
All supermaster problems I know of can be resolved by checking the checklist: https://doc.powerdns.com/authoritative/modes-of-operation.html?highlight=supermaster#supermaster-automatic-provisioning-of-slaves * supermaster support must be enabled I already asked about this on unanswered inquiry

[Pdns-users] How to understand cause of rejected notify

2018-12-01 Thread MRob
As I have had no luck to understand why supermaster only create entry in ``domains'' table but not in ``records'' and AXFR never happen again (https://mailman.powerdns.com/pipermail/pdns-users/2018-November/025624.html) I think maybe it's a bug in pdns 4.1 so I install 4.2 on slave (master

Re: [Pdns-users] AXFR queued but not executing

2018-11-30 Thread MRob
? On 2018-11-30 18:55, MRob wrote: On 2018-11-30 17:22, MRob wrote: On 2018-11-30 16:55, MRob wrote: I see this reapeat in logs: No new unfresh slave domains, 1 queued for AXFR already, 0 in progress can I please ask which timers is this waiting on? I should say original there was a error

[Pdns-users] NOTIFY response timeout value? (repeat NOTIFY slave error)

2018-12-05 Thread MRob
Hello, when supermaster send NOTIFY for large number of domain I think some NOTIFYs get re-sent. On first time slave setup that cause errors so I was looking do pdns have setting to delay re-NOTIFY timeout? Loglevel 6 doesnt say "no response so I will re-notify" however I see hint of two

Re: [Pdns-users] Increment SOA programmatically?

2018-11-20 Thread MRob
On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote: On 11/5/2018 9:15 AM, MRob wrote: still, it didn't work with auto-serial configuration: > pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'): missing field at the end of record cont

Re: [Pdns-users] Increment SOA programmatically?

2018-11-20 Thread MRob
On 2018-11-21 03:49, MRob wrote: On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote: On 11/5/2018 9:15 AM, MRob wrote: still, it didn't work with auto-serial configuration: > pdnsutil increase-serial example.org Error: Parsing record content (try 'pdnsutil check-zone'): missing fi

[Pdns-users] supermaster setting purpose?

2018-11-21 Thread MRob
Running version 4.1, there is no supermaster setting in the main config (doc says it added in 4.2) but I understand supermaster feature should work under 4.1, is that correct? When migrating to 4.2 what feature does ''supermaster=yes'' add for having in config file? Must I remove

[Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

2019-02-04 Thread MRob
Trying to use DNS updates but seeing the error in our logs "Failed PreReqqisites check, returning 6". Could someone explain what "prerequisites check" is and what can cause it to fail? What things should I check? Here is pdns log from one instance Feb 3 03:20:17 test pdns[20989]: Query:

Re: [Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

2019-02-04 Thread MRob
On 2019-02-04 10:40, MRob wrote: On 2019-02-04 10:21, Ruben d'Arco wrote: Hi MRob, The DNS Update specification (RFC2136) has a section that allows a DNS update to do check (pre-requisites) before applying the update. PDNS performs these checks, and it seems that the current records of your

Re: [Pdns-users] DNS UPDATE failing (Failed PreReqqisites check)

2019-02-04 Thread MRob
On 2019-02-04 10:21, Ruben d'Arco wrote: Hi MRob, The DNS Update specification (RFC2136) has a section that allows a DNS update to do check (pre-requisites) before applying the update. PDNS performs these checks, and it seems that the current records of your domain do not comply with those pre

[Pdns-users] API listening address/port

2021-08-20 Thread MRob via Pdns-users
Hi, the API docs shows that it listens at 127.0.0.1:8081 I only see 3 api config vars-- is there any settings for API listening port or interfaces? ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com