<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace">Hi Brian,</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">I missed that in configuration file multiple "forwarding-zone=" entries were present for different zone: I only wrote you the first of them that queries were failing, I'm sorry.</div><div class="gmail_default" style="font-family:monospace,monospace">I think the problem was that following zone forwarding need to be configured with "forwarding-zone<b>+</b>=" directive, but if I didn't find any feedback in the documentation (<a href="https://doc.powerdns.com/recursor/settings.html#forward-zones">https://doc.powerdns.com/recursor/settings.html#forward-zones</a>): may I open a github issue?</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">Thanks for your support</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 20 Mar 2020 at 17:42, Brian Candler <<a href="mailto:b.candler@pobox.com">b.candler@pobox.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Works for me, with 4.3.0-1pdns.bionic<br>
<br>
Added to recursor.conf:<br>
forward-zones=domain.sec=<a href="http://127.0.0.1:5300" rel="noreferrer" target="_blank">127.0.0.1:5300</a><br>
<br>
Restarted pdns-recursor<br>
<br>
Test:<br>
<br>
root@cache1:~# dig @localhost testing.domain.sec a<br>
<br>
; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> @localhost testing.domain.sec a<br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 54252<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<br>
<br>
In another window, while doing the above:<br>
<br>
root@cache1:~# tcpdump -i lo -nnX port 5300<br>
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode<br>
listening on lo, link-type EN10MB (Ethernet), capture size 262144 bytes<br>
16:40:24.603111 IP 127.0.0.1.26305 > 127.0.0.1.5300: UDP, length 47<br>
0x0000: 4500 004b c7dc 4000 4011 74c3 7f00 0001 E..K..@.@.t.....<br>
0x0010: 7f00 0001 66c1 14b4 0037 fe4a 740e 0000 ....f....7.Jt...<br>
0x0020: 0001 0000 0000 0001 0774 6573 7469 6e67 .........testing<br>
0x0030: 0664 6f6d 6169 6e03 7365 6300 0001 0001 .domain.sec.....<br>
0x0040: 0000 2904 d000 0080 0000 00 ..)........<br>
<br>
So I'm sorry, I don't know what's different about your setup. You did <br>
restart pdns-recursor? Does "journalctl -eu pdns-recursor" show any <br>
errors or warnings at startup?<br>
<br>
<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><pre style="font-family:"Courier New",Courier,monospace,arial,sans-serif;margin-top:0px;margin-bottom:0px;white-space:pre-wrap;color:rgb(0,0,0);font-size:14px"><table border="0" cellspacing="0" cellpadding="0" style="font-family:"Times New Roman";width:420px"><tbody><tr valign="top"><td><table border="0" cellspacing="0" cellpadding="0"><tbody><tr valign="top"><td style="text-align:initial;vertical-align:top;padding:0px 8px"><a href="http://www.certego.net/" target="_blank"><img width="96" height="96" src="http://www.certego.net/email/certego.png" alt="" style="border-radius: 0px;"></a></td><td style="text-align:initial;vertical-align:top;padding:4px 0px"><div style="padding-top:2px;color:rgb(0,172,237);font-weight:bold;font-stretch:normal;font-size:18px;line-height:normal;font-family:sans-serif;letter-spacing:1px">Giovanni Vecchi</div><div style="padding-top:2px;color:rgb(32,32,32);font-weight:bold;font-stretch:normal;line-height:normal;font-family:sans-serif">Infrastructure Lead Engineer, Certego</div><div style="padding-top:4px"><a href="tel:+39-059-7353333" style="color:rgb(84,84,84);font-stretch:normal;font-size:12px;line-height:normal;font-family:sans-serif" target="_blank">+39-059-7353333</a><span style="color:rgb(0,172,237);font-stretch:normal;font-size:12px;line-height:normal;font-family:sans-serif"></span></div><div style="padding-top:6px"><a href="http://www.linkedin.com/company/certego" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/linkedin.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://twitter.com/Certego_IRT" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/twitter.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://github.com/certego" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/github.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://www.youtube.com/CERTEGOsrl" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/youtube.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://plus.google.com/117641917176532015312" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/googleplus.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a></div></td></tr></tbody></table></td></tr></tbody></table><div style="font-stretch:normal;font-size:8px;line-height:normal;font-family:sans-serif;white-space:normal;width:420px;text-align:justify;vertical-align:top;padding:8px 0px;color:rgb(224,224,224)">Use of the information within this document constitutes acceptance for use in an "as is" condition. There are no warranties with regard to this information; Certego has verified the data as thoroughly as possible. Any use of this information lies within the user's responsibility. In no event shall Certego be liable for any consequences or damages, including direct, indirect, incidental, consequential, loss of business profits or special damages, arising out of or in connection with the use or spread of this information.</div></pre></div></div></div></div>