<html><head><style type="text/css">p { margin: 0; }</style></head><body>In addition to Peter's hint:<br>
<br>
I assume your dig is asking your Recursor on Port 53. So you have to advise the Recursor to forward queries for your local zones to your authoritative server on Port 5300.<br>
<br>
Try this in the rcursor.conf:<br>
<br>
forward-zones=<a href="http://10.in-addr.arpa">10.in-addr.arpa</a>=<a href="127.0.0.1:5300">127.0.0.1:5300</a><br>
<br>
<br>
Winfried<br>
<br>
<br><br><div class="gmail_quote">On 25. September 2014 15:51:21 MESZ, Bart-Jan van Hummel <bvanhummel@openforest.nl> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div style="font-family: verdana,helvetica,sans-serif; font-size: 10pt; color: #000000">Hi All,<br /><br />I am using pdns-server 3.3.1 with pdns-recursor and pdns-backend-mysql<br />After installing the almost everything is working perfectly, accept for the reverse DNS.<br /><br />To test powerDNS and powerDNS recursor I created a test network.<br />It is a star VPN network with:
- 1 main router
- 2 subrouters.<br />Behind each router I have clients, making use of the DNS which is behind the main router.<br /><br />Now here is what goes wrong with the reverse lookups:<br /><br />When I am behind the main router (10.20.0.0 network):<br />dig -x 10.20.0.2 ==> answer <br />dig -x 10.20.1.2 ==> answer<br />dig -x 10.20.2.2 ==> answer<br /><br />When I am behind the first router (10.20.1.0):<br />dig -x 10.20.0.2 ==> answer <br />dig -x 10.20.1.2 ==> no answer<br />dig -x 10.20.2.2 ==> answer<br /><br />When I am behind the second router (10.20.2.0):<br />dig -x 10.20.0.2 ==> answer <br />dig -x 10.20.1.2 ==> answer<br />dig -x 10.20.2.2 ==> no answer<br /><br />So it seems that it will not send an answer to me when I am asking for a reverse lookup, when I am in that network itself,<br />unless I am in the main network.<br /><br />I tried everything from upgrading from pdns 3.1 to 3.3.1 to installing everything again etc.<br />I just can't get !
it to
work.<br /><br /><br />Maybe you can help?<br />Here are my config files:<br /><br />pdns.conf<br />-----------<br /><pre><code>allow-recursion=127.0.0.1
cache-ttl=60
config-dir=/etc/powerdns
daemon=yes
disable-axfr=yes
guardian=yes
lazy-recursion=yes
local-address=0.0.0.0
local-port=5300
log-dns-details=yes
log-failed-updates=yes
logfile=/var/log/pdns.log
logging-facility=0
loglevel=4
module-dir=/usr/lib/powerdns
query-cache-ttl=60
recursor=127.0.0.1:53
setgid=pdns
setuid=pdns
socket-dir=/var/run
wildcard-url=yes
gmysql-host=localhost
gmysql-port=3306
gmysql-dbname=pdns
gmysql-password=Password
gmysql-user=pdns
gmysql-socket=/var/run/mysqld/mysqld.sock<br /><br /><br />recursor.conf<br />-------------<br /></code><code>allow-from=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fe80::/10
local-address=127.0.0.1, 10.20.0.4
local-port=53
log-common-errors=yes
max-negative-ttl=3600
quiet=yes
setuid=pdns
version-string=PowerDNS Recursor 3.3
<br /><br />When starting the recursor I do see these messages:<br />---------------------------------------------------<br /></code><code>PowerDNS Recursor 3.6.1 (jenkins@autotest.powerdns.com) (C) 2001-2014 PowerDNS.COM BV
Using 32-bits mode. Built on 20140910211642 by buildd@babin.debian.org, gcc 4.7.2.
PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
Reading random entropy from '/dev/urandom'
Only allowing queries from: 127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fe80::/10
Will not send queries to: 127.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 169.254.0.0/16, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fe80::/10, 0.0.0.0, ::
If using IPv6, please raise sysctl net.ipv6.route.max_size, currently set to 4096 which is < 16384
NOT using IPv6 for outgoing queries - set 'query-local-address6=::' to enable
Redirecting queries for zone 'test.openforest.' to: 127.0.0.1:5300
Redirecting queries for zone '20.10.in-addr.arpa.' to: 127.0.0.1:5300
Inserting rfc 1918 private space zones
Exception: Resolver binding to server socket on port 53 for 10.20.0.4: Address already in use</code><br /></pre><br />So I mostly worry about this line, but don't know how to fix this:<br /><pre><code>Will not send queries to: 127.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10,<br /></code></pre><br /><br /><div><br /><span name="x"></span><br /></div></div></blockquote></div></body></html>