[Pdns-users] powerdns-recursor caching AA answers

Hawara hawara at gmail.com
Wed Nov 16 05:22:17 UTC 2011


Hi all!

Someone makes query on our dns server:

dig @ns.ripn.net. istoreone.ru
and gets the result:

;; QUESTION SECTION:
;istoreone.ru.                  IN      A

;; AUTHORITY SECTION:
istoreone.ru.           345600  IN      NS      ns4.scalaxy.ru.
istoreone.ru.           345600  IN      NS      ns3.scalaxy.ru.

;; ADDITIONAL SECTION:
ns3.scalaxy.ru.         345600  IN      A       188.127.224.132
ns4.scalaxy.ru.         345600  IN      A       50.56.82.254

But the A records in the additional section are wrong, the real address is

dig @ns4.scalaxy.ru. ns3.scalaxy.ru
;; QUESTION SECTION:
;ns3.scalaxy.ru.                        IN      A

;; ANSWER SECTION:
ns3.scalaxy.ru.         600     IN      A       94.198.49.142


The problem is - the powerdns-recursor caches the first answer, and
remembers the wrong IP`s for ns3.scalaxy. Is there a way to disable
caching of  additinal section, or not to trust with additional section
answers from other domains?


P.S. My english is bad, sorry



More information about the Pdns-users mailing list