[Pdns-users] Pdns-recursor, auth-zone and wildcards?

[Jakob Borg]

Hi all,

I'm trying to deploy pdns-recursor (3.1.4) with overrides for certain
domains. The auth-zones directive seems perfectly suited to this, but it
seems I can't it to work together with wildcards. Goggle yields no
useful information, rather finding discussions regarding wildcard CNAMEs
in the authoritative server. For example, given the confgiuration:

/etc/powerdns/recursor.conf:
...
auth-zones=example.com=/etc/powerdns/db.stopp
...

/etc/powerdns/db.stopp:
@       86400   IN      SOA     ns root 1 604800 86400 2419200 604800
        86400   IN      NS      ns
        86400   IN      A       10.0.0.1
*       86400   IN      A       10.0.0.1
test    86400   IN      A       10.0.0.1

We can see that the zone works and is loaded for the non-wildcard
records:

; <<>> DiG 9.3.2 <<>> +nocomment test.example.com
;; global options:  printcmd
;test.example.com.              IN      A
test.example.com.       3590    IN      A       10.0.0.1
;; Query time: 3 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Apr 10 15:06:06 2007
;; MSG SIZE  rcvd: 50

But trying something random:

root at ano:~ # dig +nocomment foo.example.com

; <<>> DiG 9.3.2 <<>> +nocomment foo.example.com
;; global options:  printcmd
;foo.example.com.               IN      A
example.com.            3600    IN      SOA     ns.example.com.
root.example.com. 1 604800 86400 2419200 604800
;; Query time: 2 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Apr 10 15:06:25 2007
;; MSG SIZE  rcvd: 77

Alas, the asterisk seems literally interpreted:

; <<>> DiG 9.3.2 <<>> +nocomment *.example.com
;; global options:  printcmd
;*.example.com.                 IN      A
*.example.com.          3600    IN      A       10.0.0.1
;; Query time: 3 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Apr 10 15:06:45 2007
;; MSG SIZE  rcvd: 47

Am I missing something obvious, or are wildcards not implemented in the
current pdns-recursor?

Kindest regards,
Jakob Borg