[Pdns-users] Issue with recursive lookups in pdns 3

Grant Keller gkeller at corp.sonic.net
Tue Oct 4 23:56:21 UTC 2011


The problem, and I realise that I did not mention this before, is that 
these servers are mixed auth and recursive. What I am seeing with these 
queries is that pdns 3.0 is only returning the authoritative answer, 
while pdns 2.9 returns the recursive information.

> When querying/testing your authoritative name servers make sure you
> use the +norec flag as otherwise answers from the recursive lookups
> might mislead you.
> Or is it actually recursive DNS through PowerDNS server that you are debugging?
> On the importance of separating those two functions please see
> http://cr.yp.to/djbdns/separation.html .
>
> zaphodb at mandelbrot:~$ dig @69.12.221.213 soa vpn.cleartunnel.net +norec
>
> ;<<>>  DiG 9.7.3<<>>  @69.12.221.213 soa vpn.cleartunnel.net +norec
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34057
> ;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;vpn.cleartunnel.net.           IN      SOA
>
> ;; AUTHORITY SECTION:
> cleartunnel.net.        3600    IN      SOA     a.auth-ns.sonic.net.
> hostmaster.cleartunnel.net. 2007092101 3600 900 1209600 3600
>
> ;; Query time: 165 msec
> ;; SERVER: 69.12.221.213#53(69.12.221.213)
> ;; WHEN: Tue Oct  4 13:39:22 2011
> ;; MSG SIZE  rcvd: 115
>
> zaphodb at mandelbrot:~$ dig @64.142.56.28 soa vpn.cleartunnel.net +norec
>
> ;<<>>  DiG 9.7.3<<>>  @64.142.56.28 soa vpn.cleartunnel.net +norec
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17676
> ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
>
> ;; QUESTION SECTION:
> ;vpn.cleartunnel.net.           IN      SOA
>
> ;; AUTHORITY SECTION:
> vpn.cleartunnel.net.    3600    IN      NS      ns1.vpn.cleartunnel.net.
>
> ;; ADDITIONAL SECTION:
> ns1.vpn.cleartunnel.net. 3600   IN      A       69.12.220.27
>
> ;; Query time: 165 msec
> ;; SERVER: 64.142.56.28#53(64.142.56.28)
> ;; WHEN: Tue Oct  4 13:39:29 2011
> ;; MSG SIZE  rcvd: 71
>


-- 
Grant Keller



More information about the Pdns-users mailing list