<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">sent from the wrong account first, sorry.<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">Begin forwarded message:</div><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">Re: [Pdns-dev] How to set PowerDNS Server with option any-to-tcp</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">From: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">bert hubert <<a href="mailto:bert.hubert@netherlabs.nl" class="">bert.hubert@netherlabs.nl</a>><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">25 Aug 2015 12:39:05 CEST<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Cc: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">Aki Tuomi <<a href="mailto:cmouse@youzen.ext.b2.fi" class="">cmouse@youzen.ext.b2.fi</a>>, <a href="mailto:pdns-dev@mailman.powerdns.com" class="">pdns-dev@mailman.powerdns.com</a><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">Burak Ozalp <<a href="mailto:burak.ozalp@metu.edu.tr" class="">burak.ozalp@metu.edu.tr</a>><br class=""></span></div><br class=""><div class=""><br class=""><blockquote type="cite" class="">On 25 Aug 2015, at 12:24, Burak Ozalp <<a href="mailto:burak.ozalp@metu.edu.tr" class="">burak.ozalp@metu.edu.tr</a>> wrote:<br class=""><br class="">Thanks Bert,<br class=""><br class="">I installed dnsdist. with addAnyTCRule() i can easily do pdns any-to-tcp(). However, i couldn't manage to do for all types of queries. Should I patch the conf file ?<br class=""></blockquote><br class=""><br class="">Hi Burak,<br class=""><br class="">Try:<br class=""><br class="">"The blockFilter() also gets passed read/writable copy of the DNS Header. If you invoke setQR(1) on that, dnsdist knows you turned the packet into a response, and will send the answer directly to the original client.<br class=""><br class="">If you also called setTC(1), this will tell the remote client to move to TCP/IP, and in this way you can implement ANY-to-TCP even for downstream servers that lack this feature.”<br class=""><br class="">See: <a href="https://github.com/PowerDNS/pdns/blob/master/pdns/README-dnsdist.md#any-or-whatever-to-tc" class="">https://github.com/PowerDNS/pdns/blob/master/pdns/README-dnsdist.md#any-or-whatever-to-tc</a><br class=""><br class=""><br class="">just call setQR(1) and setTC(1) on the header field of blockFilter() and you are done.<br class=""><br class="">Good luck!<br class=""><br class=""><br class=""><br class=""><blockquote type="cite" class=""><br class="">Best Regards<br class="">Burak Ozalp<br class=""><br class="">Alinti bert hubert <<a href="mailto:bert.hubert@powerdns.com" class="">bert.hubert@powerdns.com</a>><br class=""><br class=""><blockquote type="cite" class="">Hi Burak,<br class=""><br class="">dnsdist can do this easily, please see <a href="http://dnsdist.org/" class="">http://dnsdist.org/</a> for more details.<br class="">It can set TC on any criterium.<br class=""><br class="">Good luck!<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>Bert<br class=""><br class="">On Tue, Aug 25, 2015 at 09:59:12AM +0300, Burak Ozalp wrote:<br class=""><blockquote type="cite" class="">Dear Tuomi,<br class=""><br class="">Yes it works.Does it possible to force all UDP request with<br class="">truncated packet, and force all to use TCP ?<br class=""><br class="">Best Regards<br class="">Burak Ozalp<br class=""><br class=""><br class=""><br class="">Alinti Aki Tuomi <<a href="mailto:cmouse@youzen.ext.b2.fi" class="">cmouse@youzen.ext.b2.fi</a>><br class=""><br class=""><blockquote type="cite" class="">On Mon, Aug 24, 2015 at 03:36:02PM +0300, Burak Ozalp wrote:<br class=""><blockquote type="cite" class="">I install PowerDNS with MySql backend from here.I would like to set<br class="">any-to-tcp=yes for PowerDNS Server. I tried to configure<br class="">/etc/powerdns/pdns.conf file and add a line "any-to-tcp=yes". This<br class="">option should reject UDP request from client and force to use tcp.<br class="">But when i run dig @127.0.0.1 it doesn't set the truncated bit in<br class="">response, so it doesn't work.<br class=""><br class="">How to set correctly any-to-tcp option ?<br class=""><br class=""></blockquote><br class="">It only truncates ANY query, try dig any <a href="http://domain.com" class="">domain.com</a> @localhost<br class=""><br class=""><blockquote type="cite" class=""><br class="">_______________________________________________<br class="">Pdns-dev mailing list<br class=""><a href="mailto:Pdns-dev@mailman.powerdns.com" class="">Pdns-dev@mailman.powerdns.com</a><br class="">http://mailman.powerdns.com/mailman/listinfo/pdns-dev<br class=""><br class=""></blockquote><br class=""></blockquote><br class=""><br class=""><br class=""><br class="">_______________________________________________<br class="">Pdns-dev mailing list<br class=""><a href="mailto:Pdns-dev@mailman.powerdns.com" class="">Pdns-dev@mailman.powerdns.com</a><br class="">http://mailman.powerdns.com/mailman/listinfo/pdns-dev<br class=""><br class=""></blockquote><br class=""></blockquote><br class=""><br class=""><br class=""><br class=""></blockquote><br class=""></div></blockquote></div><br class=""></body></html>