Resolving external cname's

Hello everyone !

We have been trying to use power dns as our main DNS but we are having a few problems with CNAMES. It seems we can’t resolve the external ones no matter what we try. It seems a little weird to me that such a famous DNS won’t do such a simple thing so i can only imagine this is a configuration problem on our side :

www.example.com A 127.0.0.1
www2.example.com CNAME www.example.com
www3.example.com CNAME www.somwhere-else.com

www ---> works
www2 --> works
www3 --> host not found

We are using the resolver as you can see in our config file, here it is :

pdns.conf :

# Autogenerated configuration file template

###############################

# allow-axfr-ips    If enabled, restrict zonetransfers to originate from these

#                   IP addresses

#

allow-axfr-ips=192.168.15.2

#################################

# allow-recursion       List of netmasks that are allowed to recurse

#

allow-recursion=0.0.0.0/0

#allow-recursion=127.0.0.1, 192.168.15.0/24

#################################

# allow-recursion-override   Local data even about hosts that don't exist will

#                            override the internet. (on/off)

#

allow-recursion-override=on

#################################

# cache-ttl     Seconds to store packets in the PacketCache

#

# cache-ttl=20

#################################

# chroot        If set, chroot to this directory for more security

#

# chroot=/var/spool/powerdns

#################################

# config-dir    Location of configuration directory (pdns.conf)

#

config-dir=/etc/powerdns

#################################

# config-name   Name of this virtual configuration - will rename the binary image

#

# config-name=

#################################

# control-console       Debugging switch - don't use

#

# control-console=no

#################################

# daemon        Operate as a daemon

#

daemon=yes

#################################

# default-soa-name      name to insert in the SOA record if none set in the backend

#

# default-soa-name=a.misconfigured.powerdns.server

#################################

# disable-axfr  Disable zonetransfers but do allow TCP queries

#

disable-axfr=no

#################################

# disable-tcp   Do not listen to TCP queries

#

# disable-tcp=no

#################################

# distributor-threads   Default number of Distributor (backend) threads to start

#

# distributor-threads=3

#################################

# fancy-records Process URL and MBOXFW records

#

# fancy-records=no

#################################

# guardian      Run within a guardian process

#

guardian=yes

#################################

# launch        Which backends to launch and order to query them in

#

# launch=

launch=gmysql

#################################

# lazy-recursion        Only recurse if question cannot be answered locally

#

lazy-recursion=no

#################################

# load-modules  Load this module - supply absolute or relative path

#

# load-modules=

#################################

# local-address Local IP address to which we bind

#

local-address=192.168.15.3

#################################

# local-ipv6    Local IP address to which we bind

#

# local-ipv6=

#################################

# local-port    The port on which we listen

#

local-port=53

#################################

# log-dns-details       If PDNS should log failed update requests

#

# log-dns-details=

#################################

# log-failed-updates    If PDNS should log failed update requests

#

# log-failed-updates=

#################################

# logfile       Logfile to use

#

# logfile=/var/log/pdns.log

#################################

# logging-facility      Log under a specific facility

We have tried using our resolver (pdns-resolver) as well as our ISP’s DNS and we experience the same thing : a NXDOMAIN answer.

Can anyone help us out here please ?

Thanks !

Alex NEY

Hello Steve and thank you for your answer.

Unfortunately, this change in the config does not solve my problem, i still get a NXDOMAIN answer when i query a A entry which points towards an external CNAME.

Alex

Add "root-referral=lean" to your pdns config file.