Nabble - Name Service (DNS)

PDNS returning SERVFAIL instead of NOERROR when requesting a CNAME record that doesn't exist

2009-12-08T06:32:09Z

Greetings.

I currently have a problem on a production server. There is
a customer attempting to change nameservers on a .de domain name, and
this is failing as when the automated check for the .de registrar
attempts to look up a CNAME record on one of the nameserver hostnames,
they get a SERVFAIL response because there is no CNAME record to return.
Bind will return NOERROR.

We're using pdns 2.9.21 with a mysql and mssql backend. Before going
and filing change requests to upgrade or change the configuration, I'm
wondering if anyone knows why this is happening specifically, and
whether this is fixed in later versions, or can be fixed with a
configuration change.

Many thanks for any advice. Tom.

nb. Resending due to having joined the list - my prior message remains
in the moderation queue
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Query

2009-12-07T23:02:38Z

Hi All,
          I am new to this group and Thanks for having this group.
I just downloaded and was trying out few things got this doubt and thought of getting help on the same
        My requirement is to
            1) specify the DNS server which it needs to query
            2) allow me to use options similar to dig
            3) collect the reponse given by the DNS server.

        Thanks in Advance
Sandy


------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev

_______________________________________________
dnsjava-users mailing list
dnsjava-users@...
https://lists.sourceforge.net/lists/listinfo/dnsjava-users

From forum: dnsjava-users

PDNS How to delete zone from slave?

2009-11-25T05:02:34Z

Welcome
I fight for a long time to remove the zone from the slave server.
I have configured the master and slave servers.

When I delete a zone from the master server, it should also disappear from the slave server.
But do not disappear.
I have set in the slave configuration parameter:
gmysql-delete-zone-query = delete from records where domain_id =% d

Information is stored in two MySQL.
What am I doing wrong?
Why is configured through axfr, the zone is not removed?
How to configure?
Please help.

Yours
Tom

From forum: PowerDNS

Re: PDNS and alias domains question

2009-11-25T02:47:36Z

On Tue, Nov 24, 2009 at 06:40:06PM +0100, Fagyal Csongor wrote:
> Hi,

Hello Fagzal,

> >The problem of 'alias domains' that you depicted is actually quite a frequent
> >one in #powerdns on IRCnet. I don't know of any freely available plug and play
> >solution to this but the most commonly referred to way is having some kind of
> >alias table with the gmysql backend and using stored procedures that take
> >the aliases into account for each query.
> [...]
>
> Couldn't creating a view also solve this?

Yes of course, it basically is all the same to PowerDNS, as long as the
backend returns the right values, you are free to do anything you like with
it.
Apart from stored procedures and views one could also take the 'alias table'
into account with sub select SQL statements for example.

However you might want to watch the backends performance as DNS timeouts
are generally around 1-2 seconds, so if your backends query latency is more
than a few hundred milliseconds, you might want to speed it up a little
before relying on that service in an production environment.

Stefan
--
- If only Doctor Cochrane had been a European, the Vulcans would have been far
less resistant to help us. But no; he had to be from Montana!
An exasperated Malcolm, "Shuttlepod One.", ST-Enterprise
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

compiling pdns-recursor on Mac OS X 10.6.2 Snow Leopard (with lua!)

2009-11-25T01:55:26Z

hey folks-

i just wanted to drop a note that i was able to successfully compile the powerdns recursor on Mac OS X 10.6.2 (Snow Leopard), lua scripting enabled, with relative ease. i didnt see anything in my mail archives about this, so im not sure if anyone has done it yet. so, for the curious, my steps were (this all assumes you have the OS X Developer Tools installed):

1) get boost:

--------------

downloaded the boost_1_41_0.tar.gz source from http://sourceforge.net/projects/boost/files/boost/1.41.0/ and uncompressed to /Users/chet/boost_1_41_0

2) get lua:

-----------

downloaded the latest lua (5.1.4 as of today) from http://www.lua.org/ftp/lua-5.1.4.tar.gz and uncompressed to /Users/chet/lua-5.1.4

3) compile lua:

-----------------

jumped into my uncompressed lua-5.1.4 directory, then ran:

$ sudo make macosx install

(that was easy)

so, now that are prereqs are satisfied, lets compile the pdns-recursor:

4) download the latest (as of today) from http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.1.tar.bz2 and uncompress it.

5) now, from within our uncompressed pdns-recursor-3.1.7.1 directory, run configure:

$ CXXFLAGS=-I/Users/chet/boost_1_41_0/ LUA=1 ./configure

6) now, modify the pdns-recursor Makefile to set the LUA include/lib flags:

LUA_CPPFLAGS_CONFIG ?= -I/usr/local/include

LUA_LIBS_CONFIG ?= -L/usr/local/lib -llua

(note: depending on if you did any custom modifications to the lua Makefile itself, you may have different include and lib directories)

6a) additionally, you can change the pdns-recursor Makefile to specify different bin/sbin/config install paths. i did this:

SBINDIR=/usr/local/pdns/sbin/

BINDIR=/usr/local/pdns/bin/

CONFIGDIR=/usr/local/pdns/etc/

7) now, lets make!

$ CXXFLAGS=-I/Users/chet/boost_1_41_0/ LUA=1 make

8) assuming all goes well, you should see a bunch of compile lines, and it should complete without any errors. at this point, install!

$ sudo make install

ta da! and now if you go into /usr/local/pdns, you'll see your bin, sbin, and etc dirs. etc/recursor.conf-dist will probably end up being renamed to recursor.conf, but thats up to you, of course.

as for lua, just set a lua script path with in your recursor.conf and have fun!

if anyone has any issues or comments, let me know. most of it is pretty self-explanatory and already documented, but it took some twiddling with the LUA flags in the pdns-recursor Makefile to get it to compile.

enjoy!

chet

--
----------------------------------------
chet nichols III
chet.nichols@...
aim: chet / twitter: chet
http://chetnichols.org
----------------------------------------

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-24T11:51:37Z

Nelson Pereira wrote:

> Has anyone successfully set one of theses up?
>
> I’ve tried PowerAdmin, PDNS Admin and SonzeAdmin and getting a blank screen for all of them….

PowerAdmin is working fine for us, I haven't tried the others. Have you checked your webserver's error_log after getting the blank screens? That should give you something to work with.

Nils Breunese.
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-24T11:26:12Z

Has anyone successfully set one of theses up?

I’ve tried PowerAdmin, PDNS Admin and SonzeAdmin and getting a blank screen for all of them….

Regards,

Nelson Pereira

From: Curtis Maurand [mailto:curtis@...]
Sent: Tuesday, November 24, 2009 1:44 PM
To: Nelson Pereira
Subject: Re: [Pdns-users] Question on PowerDNS on a RHEL server release 5.4

I found this list at http://www.the-scream.co.uk/forums/t27204.html

- PDNS Admin (http://freshmeat.net/projects/pdns-admin/)
- PowerAdmin (http://www.poweradmin.org/)
- PowerDNS Administration (http://sourceforge.net/projects/powerdnsadmin/)
- TUPA (http://www.tupa-dns.org/)
- WebDNS (http://freshmeat.net/projects/webdns/)
- ZoneAdmin (http://freshmeat.net/projects/zoneadmin/)
- PowerDNS on Rails (http://kennethkalmer.github.com/powerdns-on-rails/) (see below also)

Nelson Pereira wrote:

Ok, I finally got to install PDNS...

Is there a GUI for PDNS management or updating of records?

Thanks

Regards,

Nelson Pereira

-----Original Message-----

From: pdns-users-bounces@... [pdns-users-bounces@...] On Behalf Of Nils Breunese (Lemonbit)

Sent: Thursday, November 12, 2009 9:28 AM

To: pdns-users@...

Subject: Re: [Pdns-users] Question on PowerDNS on a RHEL server release 5.4

fedora epel ?

Yes, add the EPEL repository [0] to your configuration and then run 'yum

install pdns pdns-backend-mysql' to install PowerDNS with the MySQL

backend.

Nils Breunese.

[0] http://fedoraproject.org/wiki/EPEL

On Thu, Nov 12, 2009 at 11:49 AM, Nelson Pereira npereira@...

wrote:

I’m building this PowerDNS server to use as a ENUM server to resolve E2U

for VoIP.

My question is, I need to have power dns mysql backend and the powerdns

also. Where do I get those as they are not available on the RedHat

repository.

Thanks

Regards,

Nelson Pereira

Senior Network Administrator

Protus IP Solutions Inc.

npereira@...

phone: 613.733.0000 ext.528

MyFax: 613.822.5083

www.myfax.com

Refer your friends and colleagues to MyFax!

Click here for more information.

_______________________________________________

Pdns-users mailing list

Pdns-users@...

http://mailman.powerdns.com/mailman/listinfo/pdns-users

--

------------

Itamar Reis Peixoto

e-mail/msn/google talk/sip: itamar@...

skype: itamarjp

icq: 81053601

+55 11 4063 5033

+55 34 3221 8599

_______________________________________________

Pdns-users mailing list

Pdns-users@...

http://mailman.powerdns.com/mailman/listinfo/pdns-users

_______________________________________________

Pdns-users mailing list

Pdns-users@...

http://mailman.powerdns.com/mailman/listinfo/pdns-users

_______________________________________________

Pdns-users mailing list

Pdns-users@...

http://mailman.powerdns.com/mailman/listinfo/pdns-users

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: PDNS and alias domains question

2009-11-24T09:40:06Z

Hi,

> On Tue, Nov 24, 2009 at 04:35:29PM +0100, Frank Altpeter wrote:
>
>> Hi again,
>>
>
> Hi Freddy,
>
>
>> Is there any information on that topic yet? Or is powerdns development
>> currently down? :)
>>
>
> This is pdns-users and it is working fine.
> pdns-dev is over at http://mailman.powerdns.com/mailman/listinfo/pdns-dev
>
> As for myself i can tell you that i was just too lazy to answer your question
> right away, sorry. ;-)
>
> The problem of 'alias domains' that you depicted is actually quite a frequent
> one in #powerdns on IRCnet. I don't know of any freely available plug and play
> solution to this but the most commonly referred to way is having some kind of
> alias table with the gmysql backend and using stored procedures that take
> the aliases into account for each query.
>

[...]

Couldn't creating a view also solve this?

- Fagzal
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-24T09:38:32Z

Ok, I finally got to install PDNS...

Is there a GUI for PDNS management or updating of records?

Thanks

Regards,

Nelson Pereira

-----Original Message-----
From: pdns-users-bounces@... [mailto:pdns-users-bounces@...] On Behalf Of Nils Breunese (Lemonbit)
Sent: Thursday, November 12, 2009 9:28 AM
To: pdns-users@...
Subject: Re: [Pdns-users] Question on PowerDNS on a RHEL server release 5.4

> fedora epel ?

Yes, add the EPEL repository [0] to your configuration and then run 'yum
install pdns pdns-backend-mysql' to install PowerDNS with the MySQL
backend.

Nils Breunese.

[0] http://fedoraproject.org/wiki/EPEL

> On Thu, Nov 12, 2009 at 11:49 AM, Nelson Pereira <npereira@...>
> wrote:
>>
>> I’m building this PowerDNS server to use as a ENUM server to resolve E2U
>> for VoIP.
>>
>>
>>
>> My question is, I need to have power dns mysql backend and the powerdns
>> also. Where do I get those as they are not available on the RedHat
>> repository.
>>
>>
>>
>> Thanks
>>
>>
>>
>>
>>
>> Regards,
>>
>> Nelson Pereira
>> Senior Network Administrator
>>
>> Protus IP Solutions Inc.
>> npereira@...
>> phone: 613.733.0000 ext.528
>> MyFax: 613.822.5083
>> www.myfax.com
>>
>> Refer your friends and colleagues to MyFax!
>> Click here for more information.
>>
>>
>>
>> _______________________________________________
>> Pdns-users mailing list
>> Pdns-users@...
>> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>>
>
>
>
> --
> ------------
>
> Itamar Reis Peixoto
>
> e-mail/msn/google talk/sip: itamar@...
> skype: itamarjp
> icq: 81053601
> +55 11 4063 5033
> +55 34 3221 8599
> _______________________________________________
> Pdns-users mailing list
> Pdns-users@...
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: PDNS and alias domains question

2009-11-24T09:25:05Z

On Tue, Nov 24, 2009 at 04:35:29PM +0100, Frank Altpeter wrote:
> Hi again,

Hi Freddy,

> Is there any information on that topic yet? Or is powerdns development
> currently down? :)

This is pdns-users and it is working fine.
pdns-dev is over at http://mailman.powerdns.com/mailman/listinfo/pdns-dev

As for myself i can tell you that i was just too lazy to answer your question
right away, sorry. ;-)

The problem of 'alias domains' that you depicted is actually quite a frequent
one in #powerdns on IRCnet. I don't know of any freely available plug and play
solution to this but the most commonly referred to way is having some kind of
alias table with the gmysql backend and using stored procedures that take
the aliases into account for each query.
Let me point you to [1] the gmysql backend documentation which lists all
SQL queries it will do in the default installation.
These queries are all customizable and you can for example exchange them with
calls for stored procedures as long as those don't change the sequence or
types of return values.
For my personal server i used the following launch line:
launch=gmysql:priv
this means that i can override basic-query by specifying:
gmysql-priv-basic-query=select content,ttl,prio,type,domain_id,name from dns_record where type='%s' and name='%s'

I am not aware of any DNS Management Software that can cope with this kind of
alias domain, however as there are many that can deal with PowerDNS's gmysql
backend in default configuration it might still be easy to integrate.

Stefan aka ZaphodB

[1] http://doc.powerdns.com/generic-mypgsql-backends.html#AEN5593
--
"I thought we saw the worst of it; the Shadows, the Vorlons, the war. But
there's something far worse than the Shadows: reporters!"
- Sheridan, "The Illusion of Truth" (B5)
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: PDNS and alias domains question

2009-11-24T07:35:29Z

Hi again,

Is there any information on that topic yet? Or is powerdns development
currently down? :)

2009/11/17 Frank Altpeter <frank.altpeter@...>:

> Hi list,
>
> I'm using pdns since some months now, primary as an automated slave
> server (mysql backend and supermaster config).
>
> I also wanted to update my BIND based master server to pdns, but after
> checking $searchengine, the wiki and the documentation, I wasn't able
> to find any information on how to handle alias domains with it.
>
> The problem is, that I'm planning to manage about 5000 domains with
> pdns, where most of them are single domains which can be handled with
> mysql backend (and poweradmin as customer frontend) very well.
>
> The problem arises with some of our customers that have lots of alias
> domains with same records - e.g.
> customer.{com,net,org,de,ch,at,info,biz,etc.} - which is quite easy
> within BIND by just using the same zone file for multiple named.conf
> entries.
>
> I know I could reuse the config files with the BIND backend, but I
> would like to get away from the file based system and so I'm searching
> for an alternative way for handling alias domains.
>
> I also checked if I could manage the aliases with the pipe backend
> while keeping the primary domain in mysql, but didn't manage that yet.
>
> So, is there any pointer on how to do alias domain handling in a safe
> (and reliable) manner? Or is it a planned feature for the mysql
> backend?
>
>
>
>
> --
> Le deagh dhùraghd,
>
> Frank Altpeter
>

--
Le deagh dhùraghd,

Frank Altpeter
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

PDNS and alias domains question

2009-11-17T06:33:54Z

Hi list,

I'm using pdns since some months now, primary as an automated slave
server (mysql backend and supermaster config).

I also wanted to update my BIND based master server to pdns, but after
checking $searchengine, the wiki and the documentation, I wasn't able
to find any information on how to handle alias domains with it.

The problem is, that I'm planning to manage about 5000 domains with
pdns, where most of them are single domains which can be handled with
mysql backend (and poweradmin as customer frontend) very well.

The problem arises with some of our customers that have lots of alias
domains with same records - e.g.
customer.{com,net,org,de,ch,at,info,biz,etc.} - which is quite easy
within BIND by just using the same zone file for multiple named.conf
entries.

I know I could reuse the config files with the BIND backend, but I
would like to get away from the file based system and so I'm searching
for an alternative way for handling alias domains.

I also checked if I could manage the aliases with the pipe backend
while keeping the primary domain in mysql, but didn't manage that yet.

So, is there any pointer on how to do alias domain handling in a safe
(and reliable) manner? Or is it a planned feature for the mysql
backend?

--
Le deagh dhùraghd,

Frank Altpeter
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-16T15:25:14Z

We run PowerDNS on CentOS 5.4 just fine.

Thanks for the verification. I assumed so, but always leave room for doubt when I've not tried it myself.

@Nelson (the original poster):

I've had success installing and put my notes here. They may (or may not) be useful in installing on a stock RHEL/CentOS system.

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-16T10:43:18Z

A google search:

http://dag.wieers.com/rpm/packages/pdns/

Personally, I just build it from scratch RH/CENTOS. make sure you'v installed all the "dev" packages that you need to get it done.

--Curtis

Scott M. Likens wrote:

Hello Gentlemen,

did you by happen to chance to look at http://www.powerdns.com/en/downloads.aspx

I suggest using either http://downloads.powerdns.com/releases/rpm/pdns-static-2.9.22-1.i386.rpm or http://downloads.powerdns.com/releases/rpm/pdns-static-2.9.22-1.x86_64.rpm


I personally use those rpms on rhel5u4 and have been using those rpms that bert has graceiously put up for quite some time.

No need for EPEL or anything.

Scott

On Nov 12, 2009, at 1:12 PM, Nils Breunese (Lemonbit) wrote:

Hugo van der Kooij wrote:

On 12/11/09 15:38, Nils Breunese (Lemonbit) wrote:

Im very limited to linux knowledge although I can get around it. Could you
explain me how to add this repository?

1) Go to http://fedoraproject.org/wiki/EPEL
2) Click the 'How to use' link
3) Follow the instructions to install the epel-release package

I personally prefer to use rpmforge over EPEL.
See also: http://rpmrepo.org/RPMforge

I find EPEL a bit too much Fedora like.

I used to prefer RPMforge before, but I like EPEL better these days. A matter of taste I guess.

Nils Breunese.
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

!DSPAM:4afc7a5a300371538215406!


_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-14T12:59:56Z

On 14/11/09 00:31, JKLists wrote:
> Is there a change or problem with 5.4 versus 5.3?

I am not sure I understand the question.

But I have upgrade my server recently and it is running Centos 5.4 now
and it still running pdns.

Hugo.
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Dear pdns-users@powerdns.com 72% 0FF on Pfizer.

2009-11-14T05:03:14Z

News

Click here to view as a web page.

Unsubscribe | Change e-mail address | Privacy Policy | About Us

Copyright © 2009 tozom Inc. All rights reserved.

Click here http://www.tshpqqvy.cn to view as a web page.
View image in browser now http://www.tshpqqvy.cn/1.gif

Unsubscribe at http://www.tshpqqvy.cn
Change e-mail address at http://www.tshpqqvy.cn
Privacy Policy at http://www.tshpqqvy.cn
About Us at http://www.tshpqqvy.cn
Copyright © 2009 mldvr Inc. All rights reserved.

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-14T02:20:33Z

Hallo Gerhard,

I'm glad it is working now.

Gerhard Gaußling schreef:

> Am Samstag, 14. November 2009 schrieb Gerhard Gaußling:
>
>> Am Freitag, 13. November 2009 schrieb Ton van Rosmalen:
>>
>>> If you have no specific need for the authorative server I'd suggest
>>> disabling that and running the recursor on port 53 :) .
>>>
> How to achieve this? I get an error that port 53 is already in use, and
> yes, thats obviously the case, because pdns already use that port.
> Nov 14 09:57:29 Exception: Resolver binding to server socket on port 53
> for 0.0.0.0: Address already in use
> invoke-rc.d: initscript pdns-recursor, action "restart" failed.
>
> Also on localhost:
> Nov 14 10:03:27 Exception: Resolver binding to server socket on port 53
> for 127.0.0.1: Address already in use
> invoke-rc.d: initscript pdns-recursor, action "restart" failed.
>

You'd have to disable the pdns-server as only one process could listen
on port 53. I'm unsure how this is done in Ubuntu.
I'm using CentOS and I'd disable the init-script in the rc[runlevel].d
directory.

Good luck.

Regards,

Ton
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-14T01:11:30Z

Am Samstag, 14. November 2009 schrieb Gerhard Gaußling:
> Am Freitag, 13. November 2009 schrieb Ton van Rosmalen:
> > If you have no specific need for the authorative server I'd suggest
> > disabling that and running the recursor on port 53 :) .
How to achieve this? I get an error that port 53 is already in use, and
yes, thats obviously the case, because pdns already use that port.
Nov 14 09:57:29 Exception: Resolver binding to server socket on port 53
for 0.0.0.0: Address already in use
invoke-rc.d: initscript pdns-recursor, action "restart" failed.

Also on localhost:
Nov 14 10:03:27 Exception: Resolver binding to server socket on port 53
for 127.0.0.1: Address already in use
invoke-rc.d: initscript pdns-recursor, action "restart" failed.
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-14T00:53:43Z

Am Freitag, 13. November 2009 schrieb abang@...:
> 2.)
> Login and klick on "Ausgeschaltet".
>
> 3.)
> Restart your Fritzbox
>
> Done. At the next login your Fritzbox receives two DNS-Server IPs
> without this NXD forwarding feature ;-)

Hello Winfried,

thank you for this advice. I already knew that, but I thought that my
pdns setup is faulty and due to that misconfiguration pdns didn't work
properly. With Ton's help I now figured out what the culprit was.

But thank you anyway for this first aid tip!

Kind regards

Gerhard
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-14T00:48:32Z

Am Freitag, 13. November 2009 schrieb Ton van Rosmalen:

> Gerhard Gaußling schreef:
> > ~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.d/pdns.recursors
> > recursor=172.16.240.3
> > ~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.d/pdns.local
>
> Ok, You're setting up an authorative server which uses a local
> recursor as a forwarder.
Yes you seems to be right. I wanted pdns_recursor as a local recursor
but I configured my router to be used as the recursor. Thank you, Ton,
to pointing that out!
> Have you tried 'dig @localhost -p 5300' for results on the queries?
Yes I followed that advice and that works also.
> If you have no specific need for the authorative server I'd suggest
> disabling that and running the recursor on port 53.
I'll try that too, but the change in pdns.recursors already did the
trick. I'll read further in the documentation to get more basic
information about nameservers.
> I'd remove the file /etc/powerdns/pdns.d/pdns.recursors as this sets
> up a dns proxy to the router possibly overwriting the previous
> setting in pdns.conf.
Yes, that was the case. I commented that line out and now I get on
gogle.gom NXDOMAIN.
> Hope this helps.
Thank you very much, Ton.

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-13T22:35:46Z

Hello Gentlemen,

did you by happen to chance to look at http://www.powerdns.com/en/downloads.aspx

I suggest using either http://downloads.powerdns.com/releases/rpm/pdns-static-2.9.22-1.i386.rpm or http://downloads.powerdns.com/releases/rpm/pdns-static-2.9.22-1.x86_64.rpm

I personally use those rpms on rhel5u4 and have been using those rpms that bert has graceiously put up for quite some time.

No need for EPEL or anything.

Scott

On Nov 12, 2009, at 1:12 PM, Nils Breunese (Lemonbit) wrote:

> Hugo van der Kooij wrote:
>
>> On 12/11/09 15:38, Nils Breunese (Lemonbit) wrote:
>>>> Im very limited to linux knowledge although I can get around it. Could you
>>>> explain me how to add this repository?
>>>
>>> 1) Go to http://fedoraproject.org/wiki/EPEL
>>> 2) Click the 'How to use' link
>>> 3) Follow the instructions to install the epel-release package
>>
>> I personally prefer to use rpmforge over EPEL.
>> See also: http://rpmrepo.org/RPMforge
>>
>> I find EPEL a bit too much Fedora like.
>
> I used to prefer RPMforge before, but I like EPEL better these days. A matter of taste I guess.
>
> Nils Breunese.
> _______________________________________________
> Pdns-users mailing list
> Pdns-users@...
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>
> !DSPAM:4afc7a5a300371538215406!
>
>

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-13T15:31:18Z

Is there a change or problem with 5.4 versus 5.3?

My personal notes on installing on RHEL (or its free compatriot CentOS) here.

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-13T14:04:34Z

Hi Gerhard,

Gerhard Gaußling schreef:
> Am Freitag, 13. November 2009 schrieb Ton van Rosmalen:
>
> <snip>
> Hello Ton,
>
> thank you for your help.
>
You're welcome.

> In my network 172.16.240.1 is localhost , the router is 172.16.240.3.
>
> ~$ hostname
> ubuntu
> ~$ dig +short ubuntu
> 172.16.240.1
> ~$ dig +short localhost
> 127.0.0.1
>
>
> }
>
> ~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.conf
> allow-recursion=192.168.158.128,192.168.158.2,,172.16.0.0/16,,192.168.0.0/16,,10.0.0.0/8,,127.0.0.1,
> allow-recursion-override=on
> cache-ttl=20
> config-dir=/etc/powerdns
> daemon=yes
> disable-axfr=yes
> disable-tcp=no
> distributor-threads=3
> guardian=yes
> launch=gmysql
> lazy-recursion=yes
> local-address=127.0.0.1
> local-port=53
> log-dns-details=yes
> log-failed-updates=yes
> logfile=/var/log/pdns.log
> loglevel=6
> module-dir=/usr/lib/powerdns
> queue-limit=1500
> recursive-cache-ttl=10
> recursor=127.0.0.1:5300
> setgid=pdns
> setuid=pdns
> socket-dir=/var/run
> use-logfile=yes
> webserver=yes
> webserver-address=127.0.0.1
> webserver-password=xxxxx
> webserver-port=8081
> version-string=powerdns
> include=/etc/powerdns/pdns.d
>
> ~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/recursor.conf
> allow-from=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16,
> 172.16.0.0/12, ::1/128, fe80::/10
> delegation-only=com,net
> export-etc-hosts=on
> local-address=127.0.0.1
> local-port=5300
> log-common-errors=yes
> spoof-nearmiss-max=20
> trace=on
> version-string=PowerDNS Recursor 3.1-pre2 $Id: pdns_recursor.cc 835
> 2006-05-12 17:23:41Z ahu $
>
> ~$ sudo egrep -v "(#|^ *$|pass)" /etc/powerdns/pdns.d/pdns.local.gmysql
> gmysql-host=localhost
> gmysql-dbname=pdns
> gmysql-user=root
> gmysql-socket=/var/run/mysqld/mysqld.sock
> ~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.d/pdns.recursors
> recursor=172.16.240.3
> ~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.d/pdns.local
>

Ok, You're setting up an authorative server which uses a local recursor
as a forwarder.

Have you tried 'dig @localhost -p 5300' for results on the queries?

If you have no specific need for the authorative server I'd suggest
disabling that and running the recursor on port 53.

I'd remove the file /etc/powerdns/pdns.d/pdns.recursors as this sets up
a dns proxy to the router possibly overwriting the previous setting in
pdns.conf.

Hope this helps.

Ton
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-13T12:14:38Z

Am Freitag, 13. November 2009 schrieb Ton van Rosmalen:

> Gerhard Gaußling schreef:
> > Am Freitag, 13. November 2009 schrieb Gerhard Gaußling:
> >> Does DHCPOFFER of 172.16.240.21 from 172.16.240.3 (my router,
> >> fritz!box), imply, that the router acts also as a dns server?
> >
> > Sorry, tzhat I answer to myself, but what means this:
> > DNS Proxy launched, local port 57270, remote 172.16.240.3:53
>
> I'm a bit at a loss. These messages come from the pdns authorative
> server afaik.
> It can be configured to use a forwarder in this case apparently your
> router.
>
> Earlier you wrote:
>
> Nov 12 23:59:50 Calling daemonize, going to background
> gerhard@ubuntu:~$
> gerhard@ubuntu:~$ ps axu|grep recu
> root 20642 0.0 0.0 12704 1416 ? Ss Nov12 0:00
> pdns_recursor --local-address=172.16.240.1
> --allow-from=172.16.240.1/8 --daemon --trace
>
> Which is the recursor. Using this information I would think your
> /etc/resolv.conf would need:
> nameserver 172.16.240.1
>
> The DHCP configuration can replace your local network settings which
> you should be able to adjust using th dhclient.conf.
> I can´t offer any usable advise on the dhcp matter though.

Hello Ton,

thank you for your help.
In my network 172.16.240.1 is localhost , the router is 172.16.240.3.

~$ hostname
ubuntu
~$ dig +short ubuntu
172.16.240.1
~$ dig +short localhost
127.0.0.1

~$ route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Use Iface
172.16.240.1 0.0.0.0 255.255.255.255 UH 0 0 eth0
172.16.240.0 0.0.0.0 255.255.255.0 U 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 eth0
192.168.0.0 0.0.0.0 255.255.0.0 U 0 0 eth1
0.0.0.0 172.16.240.3 0.0.0.0 UG 100 0 eth0

~$ egrep -v "(#|^ *$)" /etc/dhcp3/dhclient.conf
send host-name "<hostname>";
prepend domain-name-servers 127.0.0.1;
request subnet-mask, broadcast-address, time-offset, routers,
domain-name, domain-name-servers, host-name,
netbios-name-servers, netbios-scope;
timeout 30;
alias {
interface "eth0";
fixed-address 172.16.240.1;
option subnet-mask 255.255.255.255;
}
lease {
interface "eth0";
fixed-address 172.16.240.1;
medium "link0 link1";
option subnet-mask 255.255.255.0;
option routers 172.16.240.3;
option domain-name-servers 127.0.0.1;
renew 2 2000/1/12 00:00:01;
rebind 2 2000/1/12 00:00:01;
expire 2 2000/1/12 00:00:01;
}

~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.conf
allow-recursion=192.168.158.128,192.168.158.2,,172.16.0.0/16,,192.168.0.0/16,,10.0.0.0/8,,127.0.0.1,
allow-recursion-override=on
cache-ttl=20
config-dir=/etc/powerdns
daemon=yes
disable-axfr=yes
disable-tcp=no
distributor-threads=3
guardian=yes
launch=gmysql
lazy-recursion=yes
local-address=127.0.0.1
local-port=53
log-dns-details=yes
log-failed-updates=yes
logfile=/var/log/pdns.log
loglevel=6
module-dir=/usr/lib/powerdns
queue-limit=1500
recursive-cache-ttl=10
recursor=127.0.0.1:5300
setgid=pdns
setuid=pdns
socket-dir=/var/run
use-logfile=yes
webserver=yes
webserver-address=127.0.0.1
webserver-password=xxxxx
webserver-port=8081
version-string=powerdns
include=/etc/powerdns/pdns.d

~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/recursor.conf
allow-from=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16,
172.16.0.0/12, ::1/128, fe80::/10
delegation-only=com,net
export-etc-hosts=on
local-address=127.0.0.1
local-port=5300
log-common-errors=yes
spoof-nearmiss-max=20
trace=on
version-string=PowerDNS Recursor 3.1-pre2 $Id: pdns_recursor.cc 835
2006-05-12 17:23:41Z ahu $

~$ sudo egrep -v "(#|^ *$|pass)" /etc/powerdns/pdns.d/pdns.local.gmysql
gmysql-host=localhost
gmysql-dbname=pdns
gmysql-user=root
gmysql-socket=/var/run/mysqld/mysqld.sock
~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.d/pdns.recursors
recursor=172.16.240.3
~$ sudo egrep -v "(#|^ *$)" /etc/powerdns/pdns.d/pdns.local

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-13T11:55:14Z

Gerhard Gaußling schreef:
> Am Freitag, 13. November 2009 schrieb Gerhard Gaußling:
>
>> Does DHCPOFFER of 172.16.240.21 from 172.16.240.3 (my router,
>> fritz!box), imply, that the router acts also as a dns server?
>>
>
> Sorry, tzhat I answer to myself, but what means this:
> DNS Proxy launched, local port 57270, remote 172.16.240.3:53
>
I'm a bit at a loss. These messages come from the pdns authorative
server afaik.
It can be configured to use a forwarder in this case apparently your router.

Earlier you wrote:

Nov 12 23:59:50 Calling daemonize, going to background
gerhard@ubuntu:~$
gerhard@ubuntu:~$ ps axu|grep recu
root 20642 0.0 0.0 12704 1416 ? Ss Nov12 0:00
pdns_recursor --local-address=172.16.240.1 --allow-from=172.16.240.1/8 --daemon --trace

Which is the recursor. Using this information I would think your
/etc/resolv.conf would need:
nameserver 172.16.240.1

The DHCP configuration can replace your local network settings which you
should be able to adjust using th dhclient.conf.
I can´t offer any usable advise on the dhcp matter though.

Good luck.

Ton

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-13T11:43:28Z

Am Freitag, 13. November 2009 schrieb Gerhard Gaußling:
>
> Does DHCPOFFER of 172.16.240.21 from 172.16.240.3 (my router,
> fritz!box), imply, that the router acts also as a dns server?

Sorry, tzhat I answer to myself, but what means this:
DNS Proxy launched, local port 57270, remote 172.16.240.3:53

I found this in /var/log/daemon.log:
Nov 13 20:07:12 ubuntu pdns[26912]: Our pdns instance (18983) exited
after signal 9
Nov 13 20:07:12 ubuntu pdns[26912]: Respawning
Nov 13 20:07:12 ubuntu dhclient: bound to 172.16.240.21 -- renewal in
415221 seconds.
Nov 13 20:07:13 ubuntu pdns[19124]: Guardian is launching an instance
Nov 13 20:07:13 ubuntu pdns[19124]: This is module gmysqlbackend.so
reporting
Nov 13 20:07:13 ubuntu pdns[19124]: This is a guarded instance of pdns
Nov 13 20:07:13 ubuntu pdns[19124]: It is advised to bind to explicit
addresses with the --local-address option
Nov 13 20:07:13 ubuntu pdns[19124]: UDP server bound to 0.0.0.0:53
Nov 13 20:07:13 ubuntu pdns[19124]: TCP server bound to 0.0.0.0:53
Nov 13 20:07:13 ubuntu pdns[19124]: PowerDNS 2.9.21 (C) 2001-2006
PowerDNS.COM BV (Apr 9 2008, 10:37:43, gcc 4.2.3 (Ubuntu
4.2.3-2ubuntu7)) starting up
Nov 13 20:07:13 ubuntu pdns[19124]: PowerDNS comes with ABSOLUTELY NO
WARRANTY. This is free software, and you are welcome to redistribute it
according to the terms of the GPL version 2.
Nov 13 20:07:13 ubuntu pdns[19124]: Set effective group id to 121
Nov 13 20:07:13 ubuntu pdns[19124]: Set effective user id to 116
Nov 13 20:07:13 ubuntu pdns[19124]: DNS Proxy launched, local port
57270, remote 172.16.240.3:53
Nov 13 20:07:13 ubuntu pdns[19124]: Launched webserver on 127.0.0.1:8081
Nov 13 20:07:13 ubuntu pdns[19124]: Creating backend connection for TCP
Nov 13 20:07:13 ubuntu pdns[19124]: gmysql Connection succesful
Nov 13 20:07:13 ubuntu pdns[19124]: About to create 3 backend threads
for UDP
Nov 13 20:07:13 ubuntu pdns[19124]: gmysql Connection succesful
Nov 13 20:07:13 ubuntu last message repeated 2 times
Nov 13 20:07:13 ubuntu pdns[19124]: Done launching threads, ready to
distribute questions
Nov 13 20:07:26 ubuntu pdns[19124]: Distributor misses a thread (4<3),
spawning new one
Nov 13 20:07:26 ubuntu pdns[19124]: gmysql Connection succesful

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-13T11:12:03Z

Am Freitag, 13. November 2009 schrieb Ton van Rosmalen:

> Hi Gerhard,
> What is the contents of the /etc/resolv.conf file?
> The dig @localhost queries the local recursor. Lynx uses the settings
> of resolv.conf.
> If your ISP-nameservers are in the resolv.conf (perhaps via dhcp?)
> that could explain the issue your seeing.
>
> Regards,
>
> Ton

~$ egrep -v "(^ *$|#)" /etc/resolv.conf
nameserver 127.0.0.1

~$ ifconfig|grep -A1 eth0
eth0 Link encap:Ethernet HWaddr 00:11:d8:8a:15:37
inet addr:172.16.240.21 Bcast:172.16.240.255
Mask:255.255.255.0
--
eth0:0 Link encap:Ethernet HWaddr 00:11:d8:8a:15:37
inet addr:172.16.240.1 Bcast:172.16.255.255
Mask:255.255.255.255
--
peth0 Link encap:Ethernet HWaddr 00:11:d8:8a:15:37
inet6 addr: fe80::211:d8ff:fe8a:1537/64 Scope:Link

peth0 is due to a xen dom0.

But wait: The box receives a dhcp offer from the router:
dmesg:
[ 299.717830] Bridge firewalling registered
[ 299.718898] tmpbridge: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM
feature.
[ 301.473909] device peth0 entered promiscuous mode
[ 301.473925] audit(1258135223.713:3): dev=peth0 prom=256 old_prom=0
auid=4294967295
[ 301.495717] eth0: port 1(peth0) entering learning state
[ 301.498574] eth0: topology change detected, propagating
[ 301.498582] eth0: port 1(peth0) entering forwarding state
[ 307.764432] Setting mem allocation to 2956160 kiB
[ 311.745590] eth0: no IPv6 routers present
[ 311.881694] peth0: no IPv6 routers present

~$ sudo invoke-rc.d networking restart
* Reconfiguring network interfaces...
Reloading PowerDNS authoritative nameserver: requested reload
There is already a pid file /var/run/dhclient.eth0.pid with pid 28095
killed old client process, removed PID file
Internet Systems Consortium DHCP Client V3.0.6
Copyright 2004-2007 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/

Listening on LPF/eth0/00:11:d8:8a:15:37
Sending on LPF/eth0/00:11:d8:8a:15:37
Sending on Socket/fallback
DHCPRELEASE on eth0 to 172.16.240.3 port 67
SIOCADDRT: File exists
There is already a pid file /var/run/dhclient.eth0.pid with pid 0
Internet Systems Consortium DHCP Client V3.0.6
Copyright 2004-2007 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/

Listening on LPF/eth0/00:11:d8:8a:15:37
Sending on LPF/eth0/00:11:d8:8a:15:37
Sending on Socket/fallback
DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 6
DHCPOFFER of 172.16.240.21 from 172.16.240.3
DHCPREQUEST of 172.16.240.21 on eth0 to 255.255.255.255 port 67
DHCPACK of 172.16.240.21 from 172.16.240.3
Reloading PowerDNS authoritative nameserver: requested reload
bound to 172.16.240.21 -- renewal in 415221 seconds.
* Stopping NTP server ntpd
...done.
* Starting NTP server ntpd
...done.
SIOCADDRT: No such process
Failed to bring up eth1.

Does DHCPOFFER of 172.16.240.21 from 172.16.240.3 (my router,
fritz!box), imply, that the router acts also as a dns server?
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-13T00:59:18Z

Gerhard Gaußling schrieb:
> Hello,
>
> I'm using powerdns since a long time on ubuntu/hardy amd64.
> My ISP changed his behaviour and now I get on NXDOMAIN an ad site with a
> search form. But I prefer to get the firefox error page.
>
> How do I configure pdns or the recursor to avoid this behaviour?

the easiest way to avoid this NXDOMAIN redirection is:

1.)
Go to
https://kundencenter.telekom.de/kundencenter/kundendaten/navigationshilfe/

2.)
Login and klick on "Ausgeschaltet".

3.)
Restart your Fritzbox

Done. At the next login your Fritzbox receives two DNS-Server IPs
without this NXD forwarding feature ;-)

Winfried

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-12T21:56:42Z

Hi Gerhard,

Gerhard Gaußling schreef:

> Am Donnerstag, 12. November 2009 schrieben Sie:
>
>> On Thu, Nov 12, 2009 at 09:14:28PM +0100, Gerhard Gaußling wrote:
>>
>>> ~$ dig gogle.gom
>>>
>> This is very strange. Are you 100% sure the question is being
>> processed by your local PowerDNS Recursor?
>>
>> Most NXDOMAIN redirection setups do not actively intercept non-RD DNS
>> packets.
>>
>> Can you show the output of your Recursor running in '--trace' mode
>> when answering a question for 'gogle.gom'?
>>
>
> I think you're right, but what processes the question then? When I stop
> the recursor I get the same output.
>
> But I don't understand how to trace the output. I get no messages and no
> logfiles:
>
> Nov 12 23:59:50 Calling daemonize, going to background
> gerhard@ubuntu:~$
> gerhard@ubuntu:~$ ps axu|grep recu
> root 20642 0.0 0.0 12704 1416 ? Ss Nov12 0:00
> pdns_recursor --local-address=172.16.240.1 --allow-from=172.16.240.1/8 --daemon --trace
>
> Now sometimes I don't get those responses:
>
> ~$ dig ggfj.gm @localhost
>
> <snip>
>
> gerhard@ubuntu:~$ lynx --dump ggfjjk.gom
> FRAME:
>
> [1]http://navigationshilfe.t-online.de/dnserror?url=http://www.ggfjjk.g
> om.com/
>
> <snip>
> why?
>
>

What is the contents of the /etc/resolv.conf file?
The dig @localhost queries the local recursor. Lynx uses the settings of
resolv.conf.
If your ISP-nameservers are in the resolv.conf (perhaps via dhcp?) that
could explain the issue your seeing.

Regards,

Ton
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-12T15:36:43Z

Am Donnerstag, 12. November 2009 schrieben Sie:

> On Thu, Nov 12, 2009 at 09:14:28PM +0100, Gerhard Gaußling wrote:
> > ~$ dig gogle.gom
>
> This is very strange. Are you 100% sure the question is being
> processed by your local PowerDNS Recursor?
>
> Most NXDOMAIN redirection setups do not actively intercept non-RD DNS
> packets.
>
> Can you show the output of your Recursor running in '--trace' mode
> when answering a question for 'gogle.gom'?

I think you're right, but what processes the question then? When I stop
the recursor I get the same output.

But I don't understand how to trace the output. I get no messages and no
logfiles:

Nov 12 23:59:50 Calling daemonize, going to background
gerhard@ubuntu:~$
gerhard@ubuntu:~$ ps axu|grep recu
root 20642 0.0 0.0 12704 1416 ? Ss Nov12 0:00
pdns_recursor --local-address=172.16.240.1 --allow-from=172.16.240.1/8 --daemon --trace

Now sometimes I don't get those responses:

~$ dig ggfj.gm @localhost

; <<>> DiG 9.4.2-P2 <<>> ggfj.gm @localhost
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34719
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ggfj.gm.                       IN      A

;; AUTHORITY SECTION:
gm.                     3600    IN      SOA     ns1.nic.gm.
admin.nic.gm. 2009111310 21600 900 604800
7200

;; Query time: 80 msec
;; SERVER: 172.16.240.1#53(172.16.240.1)
;; WHEN: Fri Nov 13 00:06:40 2009
;; MSG SIZE rcvd: 75

gerhard@ubuntu:~$ lynx --dump ggfjjk.gom
FRAME:

[1]http://navigationshilfe.t-online.de/dnserror?url=http://www.ggfjjk.g
om.com/

The same with the router:

~$ dig ggfjjk.gom @fritz.box

; <<>> DiG 9.4.2-P2 <<>> ggfjjk.gom @fritz.box
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63178
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ggfjjk.gom.                    IN      A

;; AUTHORITY SECTION:
.                       3600    IN      SOA     A.ROOT-SERVERS.NET.
NSTLD.VERISIGN-GRS.COM. 2009111201
1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 172.16.240.3#53(172.16.240.3)
;; WHEN: Fri Nov 13 00:05:52 2009
;; MSG SIZE rcvd: 103

But when I surf there is the redirection:

gerhard@ubuntu:~$ lynx --dump ggfjjk.gom
FRAME:

[1]http://navigationshilfe.t-online.de/dnserror?url=http://www.ggfjjk.g
om.com/

~$ ps axu |egrep '(recursor|dns)'
root 1447 0.0 0.0 35876 1332 ? Ssl Nov12
0:00 /usr/sbin/pdns_server --daemon --guardian=yes
pdns 1449 0.0 0.1 135712 4488 ? Sl Nov12
0:01 /usr/sbin/pdns_server-instance --daemon --guardian=yes
root 20642 0.0 0.0 12704 1416 ? Ss Nov12 0:00
pdns_recursor --local-address=172.16.240.1 --allow-from=172.16.240.1/8 --daemon --trace
gerhard 28342 0.0 0.0 6208 940 pts/1 R+ 00:12 0:00 egrep
(recursor|dns)

But this address gets a NOERROR response:
~$ dig gogle.gom @localhost

; <<>> DiG 9.4.2-P2 <<>> gogle.gom @localhost
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6266
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;gogle.gom.                     IN      A

;; ANSWER SECTION:
gogle.gom.              0       IN      A       80.156.86.78
gogle.gom.              0       IN      A       62.157.140.133

;; Query time: 54 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Nov 13 00:12:55 2009
;; MSG SIZE rcvd: 59

why?

How to use the --trace option?

Ok, I found it: /var/log/daemon.log, but it seems that there are no
questions or responses to pdns_recursor. I think I messed up the setup.
But what dns answers to the questions?
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-12T13:12:11Z

Hugo van der Kooij wrote:

> On 12/11/09 15:38, Nils Breunese (Lemonbit) wrote:
>>> Im very limited to linux knowledge although I can get around it. Could you
>>> explain me how to add this repository?
>>
>> 1) Go to http://fedoraproject.org/wiki/EPEL
>> 2) Click the 'How to use' link
>> 3) Follow the instructions to install the epel-release package
>
> I personally prefer to use rpmforge over EPEL.
> See also: http://rpmrepo.org/RPMforge
>
> I find EPEL a bit too much Fedora like.

I used to prefer RPMforge before, but I like EPEL better these days. A matter of taste I guess.

Nils Breunese.
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-12T12:35:03Z

On Thu, Nov 12, 2009 at 09:14:28PM +0100, Gerhard Gaußling wrote:
> I'm using powerdns since a long time on ubuntu/hardy amd64.
> My ISP changed his behaviour and now I get on NXDOMAIN an ad site with a
> search form. But I prefer to get the firefox error page.

I can understand.

> How do I configure pdns or the recursor to avoid this behaviour?
>
> ~$ dig gogle.gom

This is very strange. Are you 100% sure the question is being processed by
your local PowerDNS Recursor?

Most NXDOMAIN redirection setups do not actively intercept non-RD DNS
packets.

Can you show the output of your Recursor running in '--trace' mode when
answering a question for 'gogle.gom'?

Thanks.

Bert
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

How to avoid to be redirected to ad by my ISP if NXDOMAIN?

2009-11-12T12:14:28Z

Hello,

I'm using powerdns since a long time on ubuntu/hardy amd64.
My ISP changed his behaviour and now I get on NXDOMAIN an ad site with a
search form. But I prefer to get the firefox error page.

How do I configure pdns or the recursor to avoid this behaviour?

~$ dig gogle.gom

; <<>> DiG 9.4.2-P2 <<>> gogle.gom
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12651
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;gogle.gom. IN A

;; ANSWER SECTION:
gogle.gom. 0 IN A 80.156.86.78
gogle.gom. 0 IN A 62.157.140.133

;; Query time: 56 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Nov 12 21:13:02 2009
;; MSG SIZE rcvd: 59

pdns-server:
Installed: 2.9.21-5ubuntu1
*** 2.9.21-5ubuntu1 0
500 http://de.archive.ubuntu.com hardy/universe Packages

pdns-recursor:
Installed: 3.1.4-6ubuntu1
*** 3.1.4-6ubuntu1 0
500 http://de.archive.ubuntu.com hardy/universe Packages

pdns-backend-mysql:
Installed: 2.9.21-5ubuntu1
*** 2.9.21-5ubuntu1 0
500 http://de.archive.ubuntu.com hardy/universe Packages

Thank you in advance

Kind regards

Gerhard Gaußling
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-12T11:52:18Z

On 12/11/09 15:38, Nils Breunese (Lemonbit) wrote:
>> Im very limited to linux knowledge although I can get around it. Could you
>> explain me how to add this repository?
>
> 1) Go to http://fedoraproject.org/wiki/EPEL
> 2) Click the 'How to use' link
> 3) Follow the instructions to install the epel-release package

I personally prefer to use rpmforge over EPEL.
See also: http://rpmrepo.org/RPMforge

I find EPEL a bit too much Fedora like.

Hugo.
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS

Re: Question on PowerDNS on a RHEL server release 5.4

2009-11-12T06:38:05Z

> Im very limited to linux knowledge although I can get around it. Could you
> explain me how to add this repository?

1) Go to http://fedoraproject.org/wiki/EPEL
2) Click the 'How to use' link
3) Follow the instructions to install the epel-release package

Nils Breunese.

_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

From forum: PowerDNS