<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
Hello everyone,<br>
<br>
I'm trying to get pdns-recursor 4.3.1 to work at all on a Centos7
machine. When restarting the service, I got logs like:<br>
<br>
<pre>May 25 15:26:40 system.cdc.lan pdns_recursor[11520]: Exception while performing security poll: more than 100 (max-qperq) queries sent while resolving powerdns.com</pre>
<br>
So I tripled max-qperq value and restarted pdns-recursor, and now
get logs like:<br>
<br>
<pre>May 25 15:31:40 system.cdc.lan pdns_recursor[14524]: Enabled 'epoll' multiplexer
May 25 15:31:40 system.cdc.lan pdns_recursor[14524]: Done priming cache with root hints
May 25 15:31:40 system.cdc.lan pdns_recursor[14524]: Done priming cache with root hints
May 25 15:31:51 system.cdc.lan pdns_recursor[14524]: Exception while performing security poll: Too much time waiting for 3.1.security-status.secpoll.powerdns.com|DS, timeouts: 0, throttles: 195, queries: 62, 7009msec</pre>
<br>
<p>If I do a lookup for lxer.com, I get logs like:<br>
</p>
<pre>May 25 15:33:56 system.cdc.lan pdns_recursor[14524]: 2 [1/1] question for 'lxer.com|A' from 127.0.0.1:34253
May 25 15:33:56 system.cdc.lan pdns_recursor[14524]: 2 [1/1] answer to question 'lxer.com|A': 0 answers, 1 additional, took 26 packets, 262.302 netw ms, 265.788 tot ms, 0 throttled, 0 timeouts, 0 tcp connections, rcode=2
</pre>
<p>When I enable trace, I get lines like:</p>
<pre>May 25 15:36:44 system.cdc.lan pdns_recursor[16801]: [2] bing.com: Got 3 answers from b.root-servers.net (199.9.14.201), rcode=0 (No Error), aa=0, in 6ms
May 25 15:36:44 system.cdc.lan pdns_recursor[16801]: [2] Removing record 'bing.com|A|204.79.197.200' in the answer section without the AA bit set received from .
May 25 15:36:44 system.cdc.lan pdns_recursor[16801]: [2] Removing record 'bing.com|A|13.107.21.200' in the answer section without the AA bit set received from .
</pre>
<pre>May 25 15:55:15 system.cdc.lan pdns_recursor[16801]: [8] dell.com: Got 3 answers from j.root-servers.net (192.58.128.30), rcode=0 (No Error), aa=0, in 7ms
May 25 15:55:15 system.cdc.lan pdns_recursor[16801]: [8] Removing record 'dell.com|A|143.166.135.105' in the answer section without the AA bit set received from .
May 25 15:55:15 system.cdc.lan pdns_recursor[16801]: [8] Removing record 'dell.com|A|143.166.147.101' in the answer section without the AA bit set received from
</pre>
<p>It looks to me like pdns is _removing_ the correct answer -- that
is, on my network, dell.com <b>should </b>resolve to
143.166.147.101,and bing <b>should </b>resolve to 13.107.21.200.
<br>
</p>
<p>I'm at my wit's end. Any assistance would be much appreciated!</p>
<p><br>
</p>
<p>Regards,</p>
<p>Dave<br>
</p>
</body>
</html>