<div dir="ltr">Attached is the powerdns configuration file.<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><br><div><br></div></div></div></div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jan 19, 2021 at 12:21 PM <<a href="mailto:frank%2Bpdns@tembo.be">frank+pdns@tembo.be</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">Hi,<div><br></div><div>Could you share the configuration of the PDNS Auth server please?</div><div><br></div><div>Frank Louwers</div><div>Certified PowerDNS Consultant @ <a href="http://Kiwazo.be" target="_blank">Kiwazo.be</a><br><div><br><blockquote type="cite"><div>On 19 Jan 2021, at 10:08, Dedan Irungu via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com" target="_blank">pdns-users@mailman.powerdns.com</a>> wrote:</div><br><div><div dir="ltr">I have made the changes request as soon below. The server does not serve authoritative results.<div><br></div><div> setLocal('85.10.203.183')<br> setACL({'<a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a>', '::/0'}) -- Allow all IPs access<br><br> newServer({address='<a href="http://85.10.203.183:5300/" target="_blank">85.10.203.183:5300</a>', pool='auth'})<br> newServer({address='<a href="http://85.10.203.183:5301/" target="_blank">85.10.203.183:5301</a>', pool='recursor'})<br><br> recursive_ips = newNMG()<br> recursive_ips:addMask('<a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>') -- These network masks are the ones from allow-recursion in the Authoritative Server</div><div><br> addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))<br> addAction(AllRule(), PoolAction('auth'))<br></div><div><br></div><div><br></div><div><br></div><div>I have tried to target powerdns directly via port 5300 but the result is the same. Any dig performed on port 5300 should be authoritative but in this case it is not.</div><div><br></div><div>dig @<a href="http://85.10.203.183/" target="_blank">85.10.203.183</a> <a href="http://gifsitebuilder.com/" target="_blank">gifsitebuilder.com</a> A -p 5300<br></div><div><br><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><br><div><br></div></div></div></div></div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jan 19, 2021 at 11:51 AM Brian Candler <<a href="mailto:b.candler@pobox.com" target="_blank">b.candler@pobox.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>On 19/01/2021 08:40, Dedan Irungu via
Pdns-users wrote:<br>
</div>
<blockquote type="cite">
recursive_ips:addMask('<a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a>') -- These network masks
are the ones from allow-recursion in the Authoritative Server<br>
<br>
addAction(NetmaskGroupRule(recursive_ips),
PoolAction('recursor'))<br>
</blockquote><p>These two lines together say: "for incoming queries from *any* IP
addresses: send them to the recursor".<br>
</p><p>Try changing the first one to something like:</p><p> recursive_ips:addMask('<a href="http://0.0.0.0/0" target="_blank">192.168.0.0/16</a>')
-- netblock containing your local clients<br>
</p><p>Then queries from 192.168.x.x will go to the recursor, whereas
queries from any *other* addresses will go to the authoritative
server.<br>
</p>
</div>
</blockquote></div>
_______________________________________________<br>Pdns-users mailing list<br><a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br><a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br></div></blockquote></div><br></div><div><div><div dir="auto" style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><div dir="auto" style="overflow-wrap: break-word;"><div style="color:rgb(0,0,0);font-family:"Avenir Next";font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">Frank Louwers<br>PowerDNS Certified Consultant @ <a href="http://Kiwazo.be" target="_blank">Kiwazo.be</a><br><br></div><div style="color:rgb(0,0,0);font-family:"Avenir Next";font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><br></div><br></div></div><br></div></div></div></blockquote></div>