<div dir="ltr">Aaah, yes, that was indeed the issue. I wonder how on gods earth that ended up in the DB ... Thx!</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 23, 2014 at 2:18 PM, Aki Tuomi <span dir="ltr"><<a href="mailto:cmouse@youzen.ext.b2.fi" target="_blank">cmouse@youzen.ext.b2.fi</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">You've managed to claim your server authoritative for . zone, this is probably<br>
not a good thing. This might break more things for you. Do you have authoritative server in front of the recursor?<br>
<span class="HOEnZb"><font color="#888888"><br>
Aki<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
On Wed, Apr 23, 2014 at 02:14:30PM +0200, Johan Kooijman wrote:<br>
> Aki,<br>
><br>
> Indeed, the client had the search domain <a href="http://jkit.nl" target="_blank">jkit.nl</a>. Removed that, but.. still<br>
> no luck:<br>
><br>
> [14:06:44 jkooijman /home/jkooijman]$ dig @<IP> <a href="http://cnn.com" target="_blank">cnn.com</a><br>
><br>
> ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> @<IP> <a href="http://cnn.com" target="_blank">cnn.com</a><br>
> ; (1 server found)<br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39298<br>
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0<br>
><br>
> ;; QUESTION SECTION:<br>
> ;<a href="http://cnn.com" target="_blank">cnn.com</a>. IN A<br>
><br>
> ;; AUTHORITY SECTION:<br>
> . 300 IN SOA <a href="http://ns1.jkit.nl" target="_blank">ns1.jkit.nl</a>.<br>
> <a href="http://hostmaster.jkit.nl" target="_blank">hostmaster.jkit.nl</a>. 1 10800 3600 604800 3600<br>
><br>
> ;; Query time: 3 msec<br>
> ;; SERVER: <IP>#53(<IP>)<br>
> ;; WHEN: Wed Apr 23 14:07:30 2014<br>
> ;; MSG SIZE rcvd: 82<br>
><br>
><br>
><br>
> On Wed, Apr 23, 2014 at 2:06 PM, Aki Tuomi <<a href="mailto:cmouse@youzen.ext.b2.fi">cmouse@youzen.ext.b2.fi</a>> wrote:<br>
><br>
> > You have search parameter in /etc/resolv.conf, and host command uses that.<br>
> > Now, you have a *.<a href="http://jkit.nl" target="_blank">jkit.nl</a> IN MX record, which in turn gets used by host<br>
> > and<br>
> > gethostbyname when asked for it.<br>
> ><br>
> > Easy fix. Remove search <a href="http://jkit.nl" target="_blank">jkit.nl</a> from /etc/resolv.conf and stop using host<br>
> > =)<br>
> ><br>
> > use dig instead.<br>
> ><br>
> > Aki<br>
> ><br>
> > On Wed, Apr 23, 2014 at 01:49:17PM +0200, Johan Kooijman wrote:<br>
> > > Hi all,<br>
> > ><br>
> > > I'm seeing something I cannot explain. I've setup my pdns daemon to send<br>
> > > requests for recursions to Google DNS for now. But when I execute a host<br>
> > > lookup, I'm seeing this:<br>
> > ><br>
> > > *[13:35:42 jkooijman /home/jkooijman]$ host <a href="http://cnn.com" target="_blank">cnn.com</a> <<a href="http://cnn.com" target="_blank">http://cnn.com</a>><br>
> > <IP>*<br>
> > > *Using domain server:*<br>
> > > *Name: <hostname>*<br>
> > > *Address: <IP>#53*<br>
> > > *Aliases:*<br>
> > ><br>
> > > *<a href="http://cnn.com.jkit.nl" target="_blank">cnn.com.jkit.nl</a> <<a href="http://cnn.com.jkit.nl" target="_blank">http://cnn.com.jkit.nl</a>> mail is handled by 10<br>
> > > <a href="http://mail.jkit.nl" target="_blank">mail.jkit.nl</a> <<a href="http://mail.jkit.nl" target="_blank">http://mail.jkit.nl</a>>*.<br>
> > ><br>
> > > Now.. <a href="http://jkit.nl" target="_blank">jkit.nl</a> is a domain in the DNS database itself, but I don't really<br>
> > > understand why pdns adds it to my query.<br>
> > ><br>
> > > My config:<br>
> > ><br>
> > > setuid=pdns<br>
> > > setgid=pdns<br>
> > > launch=gmysql<br>
> > > gmysql-host=localhost<br>
> > > gmysql-user=<username><br>
> > > gmysql-password=<password><br>
> > > gmysql-dbname=dns<br>
> > > disable-axfr=no<br>
> > > allow-axfr-ips=<a href="http://127.0.0.1/32" target="_blank">127.0.0.1/32</a> <more IP's><br>
> > > allow-recursion=<a href="http://127.0.0.1/32" target="_blank">127.0.0.1/32</a> <more IP's><br>
> > > recursor=8.8.8.8<br>
> > > local-address=<IP><br>
> > > loglevel=2<br>
> > ><br>
> > > Am I missing something here?<br>
> > ><br>
> > > --<br>
> > > Met vriendelijke groeten / With kind regards,<br>
> > > Johan Kooijman<br>
> ><br>
> > > _______________________________________________<br>
> > > Pdns-users mailing list<br>
> > > <a href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.com</a><br>
> > > <a href="http://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank">http://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
> ><br>
> ><br>
><br>
><br>
> --<br>
> Met vriendelijke groeten / With kind regards,<br>
> Johan Kooijman<br>
><br>
> T <a href="tel:%2B31%280%29%206%2043%2044%2045%2027" value="+31643444527">+31(0) 6 43 44 45 27</a><br>
> F <a href="tel:%2B31%280%29%20162%2082%2000%2001" value="+31162820001">+31(0) 162 82 00 01</a><br>
> E <a href="mailto:mail@johankooijman.com">mail@johankooijman.com</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Met vriendelijke groeten / With kind regards,<br>Johan Kooijman<br><br>T +31(0) 6 43 44 45 27<br>F +31(0) 162 82 00 01<br>E <a href="mailto:mail@johankooijman.com">mail@johankooijman.com</a>
</div>