On 2016-11-13 21:21, Aki Tuomi wrote:
On Sun, Nov 13, 2016 at 05:56:50PM -0800, mro...@insiberia.net wrote:
I'm having a hard time knowing how to debug this message:
Packet for domain 'local.' denied: can't find TSIG key with name
'tsig.key.local.' and algorithm 'hmac-sha512.'
Is that a small
On 2016-11-24 12:49, bert hubert wrote:
MRob,
It is tremendously helpful if you let us know which version of PowerDNS
you
are running and on which platform.
We are aware of some versions of PowerDNS having this issue but we need
to
know what you are running.
I'm sorry I left that out. I
I have a mysql-backed authority set up locally serving the internal LAN
domain on a test platform (very lightly used at the moment). It appears
that after some time (hours), the DB connection goes stale and queries
return with dig reporting status SERVFAIL. If I wait (not sure how long,
but I
On 2018-05-07 06:50, Aki Tuomi wrote:
On 07.05.2018 09:48, MRob wrote:
Hi can anyone explain what this means and if it is important or can be
ignored? I only find unanswered mailing list posts about it.
$ sudo rec_control reload-lua-script
pdns_recursor: Error dealing with control socket
Hi can anyone explain what this means and if it is important or can be
ignored? I only find unanswered mailing list posts about it.
$ sudo rec_control reload-lua-script
pdns_recursor: Error dealing with control socket request: Unable to send
message over control channel '/var/run/lsockl2eLnQ':
On 2018-05-07 09:19, Remi Gacogne wrote:
On 05/07/2018 11:02 AM, Aki Tuomi wrote:
Can you run sudo strace -econnect,bind rec_control reload-lua-script
and
post the result?
yes, thanks for your help
bind(3, {sa_family=AF_LOCAL, sun_path="/var/run/lsock6hPxMw"}, 110) =
0
connect(3,
On 2018-04-28 21:25, MRob wrote:
On 2018-04-18 01:04, MRob wrote:
With:
rpzFile("dblfilename", {defpol=Policy.Custom,
defcontent="badserver.example.com"})
Is there a 'nice' way to make Recursor reload this file?
Does rec_control reload-zones do it?
Must I restart recursor?
On 2018-05-07 07:16, Aki Tuomi wrote:
On 07.05.2018 09:58, MRob wrote:
On 2018-05-07 06:50, Aki Tuomi wrote:
On 07.05.2018 09:48, MRob wrote:
Hi can anyone explain what this means and if it is important or can
be
ignored? I only find unanswered mailing list posts about it.
$ sudo
On 2018-04-18 01:04, MRob wrote:
With:
rpzFile("dblfilename", {defpol=Policy.Custom,
defcontent="badserver.example.com"})
Is there a 'nice' way to make Recursor reload this file?
Does rec_control reload-zones do it?
Must I restart recursor?
`rec_control reload-zones` didn't
On 2018-04-17 05:42, MRob wrote:
PowerDNS blog recommends setting dq.variable when a domain response is
part of the loaded block list.
https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/
But this example for modifying policy actions does not set
PowerDNS blog recommends setting dq.variable when a domain response is
part of the loaded block list.
https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/
But this example for modifying policy actions does not set dq.variable:
On 2018-04-16 10:55, MRob wrote:
On 2018-04-16 10:09, Remi Gacogne wrote:
On 04/16/2018 12:03 PM, MRob wrote:
According to this, you *should* be able to load a million domains
into
LUA without problem.
That's the same method this person said crashed recursor with much
less
https
On 2018-04-16 11:40, bert hubert wrote:
On Mon, Apr 16, 2018 at 11:33:17AM +, MRob wrote:
I can make NXDOMAIN applied policy for a domain in policy zone with
this:
example.com CNAME .
But how to cause NODATA response?
Hello "MRob",
We recommend that you read the documentatio
I can make NXDOMAIN applied policy for a domain in policy zone with
this:
example.com CNAME .
But how to cause NODATA response?
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
I read about how recursor can be used to block queries for tracking
domains:
https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/
But I also read it chokes recursor if the list is many thousands
domains:
I have strange errors in LUA script like this:
Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL
Exception: [string "chunk"]:2: attempt to call global 'pdnslog' (a nil
value)
Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL
Exception: [string
On 2018-04-15 21:08, MRob wrote:
I read about how recursor can be used to block queries for tracking
domains:
https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/
But I also read it chokes recursor if the list is many thousands
domains:
https
On 2018-04-17 05:24, MRob wrote:
On 2018-04-16 10:55, MRob wrote:
On 2018-04-16 10:09, Remi Gacogne wrote:
On 04/16/2018 12:03 PM, MRob wrote:
According to this, you *should* be able to load a million domains
into
LUA without problem.
That's the same method this person said crashed
On 2018-04-16 10:09, Remi Gacogne wrote:
On 04/16/2018 12:03 PM, MRob wrote:
According to this, you *should* be able to load a million domains
into
LUA without problem.
That's the same method this person said crashed recursor with much
less
https://git.mauras.ch/Various
With:
rpzFile("dblfilename", {defpol=Policy.Custom,
defcontent="badserver.example.com"})
Is there a 'nice' way to make Recursor reload this file?
Does rec_control reload-zones do it?
Must I restart recursor?
___
Pdns-users mailing list
On 2018-04-16 07:01, Brian Candler wrote:
On 15/04/2018 22:08, MRob wrote:
I read about how recursor can be used to block queries for tracking
domains:
https://blog.powerdns.com/2016/01/19/efficient-optional-filtering-of-domains-in-recursor-4-0-0/
You may find this interesting:
https
On 2018-04-16 07:45, Remi Gacogne wrote:
Hi,
On 04/16/2018 01:41 AM, MRob wrote:
I have strange errors in LUA script like this:
Unable to load Lua script from '/etc/pdns-recursor/luaScript.lua': STL
Exception: [string "chunk"]:2: attempt to call global 'pdnslog' (a nil
value)
Unab
I use mysql backend and SOA serial set to 0 in datebase for auto-serial
features. But sometime come occasion we must update one record in
database directly, not using DNSUPDATE. In this case how to tell pdns
please update SOA serial? I cant find pdns_control, pdnsutil command for
this.
On 2018-11-05 10:57, Torsten Hantzsche wrote:
On Sun, 4 Nov 2018, MRob wrote:
I use mysql backend and SOA serial set to 0 in datebase for
auto-serial features. But sometime come occasion we must update one
record in database directly, not using DNSUPDATE. In this case how to
tell pdns
On 2018-11-05 16:49, Nico CARTRON wrote:
Hi MRob,
On 05-nov-2018 17:34 CET, wrote:
On 2018-11-05 10:57, Torsten Hantzsche wrote:
> On Sun, 4 Nov 2018, MRob wrote:
>
>
> > I use mysql backend and SOA serial set to 0 in datebase for
> > auto-serial features. But sometime
in fact after reboot looks like old serial is lost for all domains.
why is change_date not kept up to date? all domains have it to be NULL,
I think its where the serial is derived from when using autoserial
On 2018-11-07 20:18, MRob wrote:
Please some help for this? Looks like pdnsutil
Please some help for this? Looks like pdnsutil increase-serial not made
to work for mysql backend with autoserial, so how to programmatically
request increase serial?
pdnsutil increase-serial example.org
Error: Parsing record content (try 'pdnsutil check-zone'): missing field
at the end
So... any to help on this below keeping in mind I use autoserial?
I use mysql backend and SOA serial set to 0 in datebase for
auto-serial features. But sometime come occasion we must update one
record in database directly, not using DNSUPDATE. In this case how to
tell pdns please update SOA
On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote:
On 11/5/2018 9:15 AM, MRob wrote:
still, it didn't work with auto-serial configuration:
> pdnsutil increase-serial example.org
Error: Parsing record content (try 'pdnsutil check-zone'): missing
field at
the end of record cont
On 2018-12-11 16:03, Remi Gacogne wrote:
On 12/7/18 6:10 PM, MRob wrote:
NOTIFY 3sec timeout is hardcoded? ANyone please confirm?
At a quick glance, it looks like the first attempt has a 3s timeout,
the
second one 5s, the third one 9s and the last one 17s:
https://github.com/PowerDNS/pdns
I see this reapeat in logs:
No new unfresh slave domains, 1 queued for AXFR already, 0 in progress
can I please ask which timers is this waiting on?
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
On 2018-11-30 16:55, MRob wrote:
I see this reapeat in logs:
No new unfresh slave domains, 1 queued for AXFR already, 0 in progress
can I please ask which timers is this waiting on?
I should say original there was a error on the slave which fixed and
restarted pdns. slave-cycle-interval
On 2018-11-30 17:22, MRob wrote:
On 2018-11-30 16:55, MRob wrote:
I see this reapeat in logs:
No new unfresh slave domains, 1 queued for AXFR already, 0 in progress
can I please ask which timers is this waiting on?
I should say original there was a error on the slave which fixed
On 2018-11-30 19:37, Randall Diffenderfer via Pdns-users wrote:
using centos rpm for powerdns, version 3.4.11 (this would seem to be
old, but it's what they supply).
you can update just use pdns repo to save headaches
https://repo.powerdns.com/
___
: x86_64
Version : 1.0.5
Thats out of deate. Probably to ask somewhere why you are not pulling
newest epel packaging.
Release : 1.el7
Size: 350 k
Repo: installed
From repo : epel
Summary : The Sodium crypto library
URL : http://libsodium.org/
On
All supermaster problems I know of can be resolved by checking the
checklist:
https://doc.powerdns.com/authoritative/modes-of-operation.html?highlight=supermaster#supermaster-automatic-provisioning-of-slaves
* supermaster support must be enabled
I already asked about this on unanswered inquiry
As I have had no luck to understand why supermaster only create entry in
``domains'' table but not in ``records'' and AXFR never happen again
(https://mailman.powerdns.com/pipermail/pdns-users/2018-November/025624.html)
I think maybe it's a bug in pdns 4.1 so I install 4.2 on slave (master
?
On 2018-11-30 18:55, MRob wrote:
On 2018-11-30 17:22, MRob wrote:
On 2018-11-30 16:55, MRob wrote:
I see this reapeat in logs:
No new unfresh slave domains, 1 queued for AXFR already, 0 in
progress
can I please ask which timers is this waiting on?
I should say original there was a error
Hello, when supermaster send NOTIFY for large number of domain I think
some NOTIFYs get re-sent. On first time slave setup that cause errors so
I was looking do pdns have setting to delay re-NOTIFY timeout?
Loglevel 6 doesnt say "no response so I will re-notify" however I see
hint of two
On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote:
On 11/5/2018 9:15 AM, MRob wrote:
still, it didn't work with auto-serial configuration:
> pdnsutil increase-serial example.org
Error: Parsing record content (try 'pdnsutil check-zone'): missing
field at
the end of record cont
On 2018-11-21 03:49, MRob wrote:
On 2018-11-06 08:39, Daniel Miller via Pdns-users wrote:
On 11/5/2018 9:15 AM, MRob wrote:
still, it didn't work with auto-serial configuration:
> pdnsutil increase-serial example.org
Error: Parsing record content (try 'pdnsutil check-zone'): missing
fi
Running version 4.1, there is no supermaster setting in the main config
(doc says it added in 4.2) but I understand supermaster feature should
work under 4.1, is that correct?
When migrating to 4.2 what feature does ''supermaster=yes'' add for
having in config file? Must I remove
Trying to use DNS updates but seeing the error in our logs "Failed
PreReqqisites check, returning 6". Could someone explain what
"prerequisites check" is and what can cause it to fail? What things
should I check?
Here is pdns log from one instance
Feb 3 03:20:17 test pdns[20989]: Query:
On 2019-02-04 10:40, MRob wrote:
On 2019-02-04 10:21, Ruben d'Arco wrote:
Hi MRob,
The DNS Update specification (RFC2136) has a section that allows a DNS
update to do check (pre-requisites) before applying the update.
PDNS performs these checks, and it seems that the current records of
your
On 2019-02-04 10:21, Ruben d'Arco wrote:
Hi MRob,
The DNS Update specification (RFC2136) has a section that allows a DNS
update to do check (pre-requisites) before applying the update.
PDNS performs these checks, and it seems that the current records of
your domain do not comply with those pre
Hi, the API docs shows that it listens at 127.0.0.1:8081
I only see 3 api config vars-- is there any settings for API listening
port or interfaces?
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
46 matches
Mail list logo