<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 1/10/12 2:35 PM, bert hubert wrote:
<blockquote
cite="mid:732896DE-995F-45D0-BC7F-1FB08F9A9D95@netherlabs.nl"
type="cite">
<pre wrap="">
On Jan 10, 2012, at 11:28 PM, Rory Toma wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I have a case where we are transitioning from a traditional (albeit hacked) bind server to powerdns auth server.
I have the case right now where I've set up powerdns, and set the allow-recursion-override=yes and set up the recursor, and I have a few questions.
1) It seems that "recursor" only accepts a single IP? Is this true?
</pre>
</blockquote>
<pre wrap="">
Yes.
</pre>
<blockquote type="cite">
<pre wrap="">2) It works ok for records that powerdns server. Howerver, if I do a query of a record that is not in powerdns, I do not see it query the recursor server. If I remove SOA from the powerdns data, then it recurses fine, however, it no longer answers for data that is in the powerdns records. How do I set up the pdns config file so that it will answer for records that it has in it's data that it is SOA for, and forward these to the recursor server if the data isn't there?
</pre>
</blockquote>
</blockquote>
This is exactly the case, and yes, if you remove the SOA record,
powerdns becomes severely confused. 8-) I refer to the paragraph in
Ch 15 of the power dns manual:<br>
<br>
<meta charset="utf-8">
<span class="Apple-style-span" style="color: rgb(0, 0, 0);
font-family: 'luxi sans', sans-serif; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing: normal;
line-height: normal; orphans: 2; text-align: -webkit-auto;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-decorations-in-effect:
none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px; font-size: medium; ">"To make sure that the local
authoritative database overrides recursive information, PowerDNS
first tries to answer a question from its own database. If that
succeeds, the answer packet is sent back immediately without
involving the recursor in any way. This means that for questions
for which there is no answer, PowerDNS will consult the recursor
for an recursive query, even if PowerDNS is authoritative for a
domain! This will only cause problems if you 'fake' domains which
don't really exist.</span>"<br>
<br>
What I want to do is have powerdns consult the recursor even of
powerdns is authoritative for a domain. This is what I can' seem to
get to work.<br>
<br>
thx<br>
<br>
<blockquote
cite="mid:732896DE-995F-45D0-BC7F-1FB08F9A9D95@netherlabs.nl"
type="cite">
<pre wrap="">
If PowerDNS has the SOA (which means 'Start of Authority'), PowerDNS 3.0 considers itself authoritative. In that case it indeed won't hand off to the recursor. But I'm not sure if this is the problem you describe.
If you remove the SOA from a domain, PowerDNS might become severely confused.
What effect are you trying to achieve?
Bert
</pre>
<blockquote type="cite">
<pre wrap="">thx
_______________________________________________
Pdns-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.com</a>
<a class="moz-txt-link-freetext" href="http://mailman.powerdns.com/mailman/listinfo/pdns-users">http://mailman.powerdns.com/mailman/listinfo/pdns-users</a>
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<br>
</body>
</html>