<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Thanks for the clarification, but this scares me. How can I have
configured the server in a way it thinks it is authoritative for the
entire Internet?
<br>
It should be authoritative for zur-sonne.it and the other 2500
domains we have, sihosting.cloud is not part of the domains we
host....
<br>
<br>
Am 22.06.2021 um 17:05 schrieb Brian Candler:
<br>
On 22/06/2021 15:54, Thomas wrote:
<br>
<blockquote type="cite" style="color: #007cff;">Doing a "dig <a
class="moz-txt-link-abbreviated" href="http://www.zur-sonne.it">www.zur-sonne.it</a>
+nostats +nocomments +nocmd @localhost" I (think) get correct
result:
<br>
<br>
<br>
; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.5
<<>> <a class="moz-txt-link-abbreviated"
href="http://www.zur-sonne.it">www.zur-sonne.it</a> +nostats
+nocomments +nocmd @localhost
<br>
;; global options: +cmd
<br>
;www.zur-sonne.it. IN A
<br>
<a class="moz-txt-link-abbreviated" href="http://www.zur-sonne.it">www.zur-sonne.it</a>.
10800 IN CNAME cms-v2.sihosting.cloud.
<br>
<br>
And nslookup can not resolve cms-v2.sihosting.cloud as I pointed
it to localhost to query from. Correct?
<br>
</blockquote>
<br>
I believe you're right. nslookup thinks it's talking to a recursive
nameserver, and wants to chase the CNAME record. However I would not
have expected an NXDOMAIN response here; your nameserver ought to
have returned REFUSED. It seems like you've made your nameserver
authoritative for the entire DNS (or at least, for sihosting.cloud)
<br>
<br>
For that dig command line, when talking to an authoritative
nameserver, I'd also recommend you add the "+norec" flag, which
makes it explicit that you don't want to recurse.
<br>
<br>
<div class="moz-cite-prefix">Am 22.06.2021 um 16:54 schrieb Thomas
via Pdns-users:<br>
</div>
<blockquote type="cite"
cite="mid:33da32e6-7786-bd63-94f1-e13badc2d2e1@plant.systems">
<br>
Am 22.06.2021 um 16:16 schrieb Brian Candler:
<br>
<blockquote type="cite">On 22/06/2021 14:55, Thomas via Pdns-users
wrote:
<br>
<blockquote type="cite">I have upgraded pdns authoritative
server from version 4.3 to version 4.4.1 on CentOS 7, MySQL is
the backend.
<br>
If I query a CNAME record on both servers I get the following
error (do not remember if it worked before the upgrade):
<br>
<br>
[root@pdns1 log]# nslookup <a class="moz-txt-link-abbreviated" href="http://www.example.it">www.example.it</a> localhost
<br>
Server: localhost
<br>
Address: ::1#53
<br>
<br>
<a class="moz-txt-link-abbreviated" href="http://www.example.it">www.example.it</a> canonical name =
cms-v2.externaldomain.cloud.
<br>
** server can't find cms-v2.externaldomain.cloud: NXDOMAIN </blockquote>
<br>
Firstly, please don't hide domains: see
<br>
<br>
<a class="moz-txt-link-freetext" href="https://blog.powerdns.com/2016/01/18/open-source-support-out-in-the-open/">https://blog.powerdns.com/2016/01/18/open-source-support-out-in-the-open/</a>
<br>
<br>
Secondly, which of those domains is your server authoritative
for?
<br>
<br>
PowerDNS will not attempt to follow CNAME records. General
recursion was removed in Authoritative Server 4.1. (It will
send queries for ALIAS records, but only if you've configured it
with a recursor to use).
<br>
<br>
<br>
</blockquote>
Sorry, was not aware of that. So let me try again....
<br>
<br>
Doing a "dig <a class="moz-txt-link-abbreviated" href="http://www.zur-sonne.it">www.zur-sonne.it</a> +nostats +nocomments +nocmd
@localhost" I (think) get correct result:
<br>
<br>
<br>
; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.5
<<>> <a class="moz-txt-link-abbreviated" href="http://www.zur-sonne.it">www.zur-sonne.it</a> +nostats +nocomments +nocmd
@localhost
<br>
;; global options: +cmd
<br>
;www.zur-sonne.it. IN A
<br>
<a class="moz-txt-link-abbreviated" href="http://www.zur-sonne.it">www.zur-sonne.it</a>. 10800 IN CNAME
cms-v2.sihosting.cloud.
<br>
<br>
And nslookup can not resolve cms-v2.sihosting.cloud as I pointed
it to localhost to query from. Correct?
<br>
Where is the stick I could hit myself? Feeling stupid....Should
not do this with more than 30° Celsius temperature.
<br>
<br>
Thanks and sorry for the noise,
<br>
Thomas
<br>
_______________________________________________
<br>
Pdns-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.com</a>
<br>
<a class="moz-txt-link-freetext" href="https://mailman.powerdns.com/mailman/listinfo/pdns-users">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a>
<br>
</blockquote>
<br>
</body>
</html>