<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi fooks,</p>
<p>I've something strange: When I don't use dnsdist on my master
dns, axfr to my slave works. When I place dnsdist in front of the
master dns I get and AXFR error. The exact error is, when running
a pdns_control retrieve example.com (replaced the actual
domainname with example.com:</p>
<p><font face="Courier New, Courier, monospace">pdns_server:
Starting AXFR of 'example.com' from remote 192.168.1.1:53<br>
pdns_server: Unable to AXFR zone 'example.com' from remote
'192.168.1.1' (resolver): AXFR chunk error: Server Failure</font><br>
</p>
<p> I've read <a class="moz-txt-link-freetext" href="https://dnsdist.org/advanced/axfr.html">https://dnsdist.org/advanced/axfr.html</a> and next
dnsdist config file on the master (192.168.1.1), slave is on
192.168.1.2: <br>
</p>
<p><font face="Courier New, Courier, monospace">setLocal('192.168.1.1')<br>
addLocal('127.0.0.1:53')<br>
setACL({'0.0.0.0/0', '::/0'}) -- Allow all IPs access<br>
<br>
newServer({address='127.0.0.1:5300', pool='auth'})<br>
newServer({address='127.0.0.1:54', pool='recursor'})<br>
<br>
newServer({address='192.168.1.1', name='master',
pool={'master'}})<br>
<br>
recursive_ips = newNMG()<br>
recursive_ips:addMask('192.168.1.2/32') <br>
recursive_ips:addMask('127.0.0.1/32')<br>
recursive_ips:addMask('192.168.1.3/32')<br>
<br>
addAction(NetmaskGroupRule(recursive_ips),
PoolAction('recursor'))<br>
addAction(AllRule(), PoolAction('auth'))<br>
<br>
addAction(OrRule({QTypeRule(dnsdist.SOA),
QTypeRule(dnsdist.AXFR), QTypeRule(dnsdist.IXFR)}),
PoolAction('master'))<br>
addAction(AndRule({OrRule({QTypeRule(dnsdist.AXFR),
QTypeRule(dnsdist.IXFR)}),
NotRule(makeRule('192.168.1.1/32'))}),
RCodeAction(dnsdist.REFUSED))<br>
<br>
setECSOverride(true)<br>
setECSSourcePrefixV4(32)<br>
setECSSourcePrefixV6(128)<br>
<br>
</font><br>
</p>
<p>Using:</p>
<p>Master: CentOS 7.6 running: pdns-4.0.7-1,
pdns-backend-mysql-4.0.7-1, pdns-recursor-4.1.12-1 and
dnsdist-1.3.3-1</p>
<p>Slave: CentOS 7.6 running: pdns-4.1.8-1,
pdns-backend-mysql-4.1.8-1, pdns-recursor-4.1.9-1 and
dnsdist-1.3.3-1</p>
<p><br>
</p>
<p>Someone suggestions? I also tried updating pdns-server and
pdns-recursor to 4.1x but that doesn't make any difference. <br>
</p>
<br>
</body>
</html>