<div dir="ltr"><div>The server is now working as expected.</div><div><br></div><div>I have checked via Dns checker and the result is as shown on the link below.</div><div><br></div><div><a href="https://mxtoolbox.com/SuperTool.aspx?action=dns%3aessyfortunes.com&run=toolpage">https://mxtoolbox.com/SuperTool.aspx?action=dns%3aessyfortunes.com&run=toolpage</a><br></div><div><br></div><div>The issue was on dnsdist configuration it worked by changing.</div><div><br></div><div> recursive_ips:addMask('0<a href="http://127.0.0.1/8" target="_blank">.0.0.0/</a>0') <br></div><div> to </div><div> recursive_ips:addMask('<a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>') </div><div><br></div>Thank you for your assistance.<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><br><div><br></div></div></div></div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jan 19, 2021 at 12:56 PM Markus Ehrlicher via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com">pdns-users@mailman.powerdns.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="DE">
<div class="gmail-m_-7088618279670635951WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">This is normal behavior. The aa-flag is the right point to look at and at your dig-results to port 5300, this flag ist set.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Compare your results with „dig <a href="http://google.de" target="_blank">google.de</a> @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a>“:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">; <<>> DiG 9.11.3-1ubuntu1.13-Ubuntu <<>> <a href="http://www.google.de" target="_blank">www.google.de</a> @<a href="http://ns1.komsa.net" target="_blank">ns1.komsa.net</a> SOA<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; global options: +cmd<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; Got answer:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16618<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; OPT PSEUDOSECTION:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">; EDNS: version: 0, flags:; udp: 512<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; QUESTION SECTION:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;<a href="http://www.google.de" target="_blank">www.google.de</a>. IN SOA<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; AUTHORITY SECTION:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><a href="http://google.de" target="_blank">google.de</a>. 60 IN SOA <a href="http://ns1.google.com" target="_blank">ns1.google.com</a>. <a href="http://dns-admin.google.com" target="_blank">dns-admin.google.com</a>. 352375909 900 900 1800 60<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; Query time: 27 msec<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; SERVER: 217.119.211.10#53(217.119.211.10)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; WHEN: Tue Jan 19 10:43:36 CET 2021<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; MSG SIZE rcvd: 102<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">root@markusehrlicher:~# dig <a href="http://google.de" target="_blank">google.de</a> @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">; <<>> DiG 9.11.3-1ubuntu1.13-Ubuntu <<>> <a href="http://google.de" target="_blank">google.de</a> @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; global options: +cmd<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; Got answer:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42438<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; WARNING: recursion requested but not available<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; OPT PSEUDOSECTION:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">; EDNS: version: 0, flags:; udp: 512<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; QUESTION SECTION:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;<a href="http://google.de" target="_blank">google.de</a>. IN A<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">;; ANSWER SECTION:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><a href="http://google.de" target="_blank">google.de</a>. 300 IN A 172.217.18.99<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">Von:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> Dedan Irungu <<a href="mailto:dedanirungu@gmail.com" target="_blank">dedanirungu@gmail.com</a>>
<br>
<b>Gesendet:</b> Dienstag, 19. Januar 2021 10:51<br>
<b>An:</b> Markus Ehrlicher <<a href="mailto:Markus.Ehrlicher@komsa.de" target="_blank">Markus.Ehrlicher@komsa.de</a>><br>
<b>Betreff:</b> Re: [Pdns-users] Powerdns server is not passing Authority parameter<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">When I perform a dig the section on Authority is zero.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">dig @<a href="http://85.10.203.183" target="_blank">85.10.203.183</a> <a href="http://gifsitebuilder.com" target="_blank">
gifsitebuilder.com</a> A -p 53<br>
<br>
; <<>> DiG 9.16.1-Ubuntu <<>> @<a href="http://85.10.203.183" target="_blank">85.10.203.183</a>
<a href="http://gifsitebuilder.com" target="_blank">gifsitebuilder.com</a> A -p 53<br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31345<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1<br>
;; WARNING: recursion requested but not available<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Also dns checker was returning as not authoritative.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="https://mxtoolbox.com/SuperTool.aspx?action=dns%3aessyfortunes.com&run=toolpage" target="_blank">https://mxtoolbox.com/SuperTool.aspx?action=dns%3aessyfortunes.com&run=toolpage</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Tue, Jan 19, 2021 at 12:40 PM Markus Ehrlicher via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com" target="_blank">pdns-users@mailman.powerdns.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Hello,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">where do you get the information from your dig-answer, that the server is not authoritative?</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Best regards,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Markus</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">Von:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> Pdns-users <</span><a href="mailto:pdns-users-bounces@mailman.powerdns.com" target="_blank"><span style="font-size:11pt;font-family:Calibri,sans-serif">pdns-users-bounces@mailman.powerdns.com</span></a><span style="font-size:11pt;font-family:Calibri,sans-serif">>
<b>Im Auftrag von </b>frank+pdns--- via Pdns-users<br>
<b>Gesendet:</b> Dienstag, 19. Januar 2021 10:21<br>
<b>An:</b> Dedan Irungu <</span><a href="mailto:dedanirungu@gmail.com" target="_blank"><span style="font-size:11pt;font-family:Calibri,sans-serif">dedanirungu@gmail.com</span></a><span style="font-size:11pt;font-family:Calibri,sans-serif">><br>
<b>Cc:</b> pdns-users-ml <</span><a href="mailto:pdns-users@mailman.powerdns.com" target="_blank"><span style="font-size:11pt;font-family:Calibri,sans-serif">pdns-users@mailman.powerdns.com</span></a><span style="font-size:11pt;font-family:Calibri,sans-serif">><br>
<b>Betreff:</b> Re: [Pdns-users] Powerdns server is not passing Authority parameter</span><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Hi,<u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Could you share the configuration of the PDNS Auth server please?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Frank Louwers<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Certified PowerDNS Consultant @
<a href="http://Kiwazo.be" target="_blank">Kiwazo.be</a><u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-bottom:12pt"><u></u> <u></u></p>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<p class="MsoNormal">On 19 Jan 2021, at 10:08, Dedan Irungu via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com" target="_blank">pdns-users@mailman.powerdns.com</a>> wrote:<u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">I have made the changes request as soon below. The server does not serve authoritative results.<u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> setLocal('85.10.203.183')<br>
setACL({'<a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a>', '::/0'}) -- Allow all IPs access<br>
<br>
newServer({address='<a href="http://85.10.203.183:5300/" target="_blank">85.10.203.183:5300</a>', pool='auth'})<br>
newServer({address='<a href="http://85.10.203.183:5301/" target="_blank">85.10.203.183:5301</a>', pool='recursor'})<br>
<br>
recursive_ips = newNMG()<br>
recursive_ips:addMask('<a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>') -- These network masks are the ones from allow-recursion in the Authoritative Server<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><br>
addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))<br>
addAction(AllRule(), PoolAction('auth'))<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">I have tried to target powerdns directly via port 5300 but the result is the same. Any dig performed on port 5300 should be authoritative but in this case it is not.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">dig @<a href="http://85.10.203.183/" target="_blank">85.10.203.183</a>
<a href="http://gifsitebuilder.com/" target="_blank">gifsitebuilder.com</a> A -p 5300<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">On Tue, Jan 19, 2021 at 11:51 AM Brian Candler <<a href="mailto:b.candler@pobox.com" target="_blank">b.candler@pobox.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<p class="MsoNormal">On 19/01/2021 08:40, Dedan Irungu via Pdns-users wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<p class="MsoNormal"> recursive_ips:addMask('<a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a>') -- These network masks are the ones from allow-recursion in the Authoritative Server<br>
<br>
addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))<u></u><u></u></p>
</blockquote>
<p class="MsoNormal">These two lines together say: "for incoming queries from *any* IP addresses: send them to the recursor".<u></u><u></u></p>
<p class="MsoNormal">Try changing the first one to something like:<u></u><u></u></p>
<p class="MsoNormal"> recursive_ips:addMask('<a href="http://0.0.0.0/0" target="_blank">192.168.0.0/16</a>') -- netblock containing your local clients<u></u><u></u></p>
<p class="MsoNormal">Then queries from 192.168.x.x will go to the recursor, whereas queries from any *other* addresses will go to the authoritative server.<u></u><u></u></p>
</div>
</blockquote>
</div>
<p class="MsoNormal">_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><u></u><u></u></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt"><span style="font-size:10pt;font-family:"Avenir Next",serif;color:black">Frank Louwers<br>
PowerDNS Certified Consultant @ </span><a href="http://Kiwazo.be" target="_blank"><span style="font-size:10pt;font-family:"Avenir Next",serif">Kiwazo.be</span></a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Avenir Next",serif;color:black"> </span><u></u><u></u></p>
</div>
<p class="MsoNormal"><span style="color:black"> </span><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</blockquote></div>