[Pdns-users] NXDOMAIN on CNAME and UPC

Aki Tuomi cmouse at youzen.ext.b2.fi
Wed May 29 13:41:46 UTC 2013


On Wed, May 29, 2013 at 03:12:38PM +0200, Pawel Panek wrote:
> >
> > You are claiming to be authoritative for root zone. Please do not claim root zone for yourself.
> 
> Right, this what I was concerned about too. Going this path I think I
> have it solved my problem.
> 
> I had no clue why PowerDNS is answering like that and just assumed
> this is an answer related CNAME target which is out zone.
> I'm using mysql backend and nowhere in records table I have soa record
> defined for '.'. But I had bunch of records with empty name and type
> SOA. They were assigned to some domain_id but apparently mysql backend
> treats them as SOA for root. When I added a name (a FQDN) for all such
> SOA records the response for that CNAME has changed. Now it looks like

The way powerdns handles records is quite simple, and in a sense, the 
domain_id is bit misleading.

All names in 'records' table are assumed to be fully qualified, they are
not filled in from domains table, thus if you have empty name in records
table, it does indeed mean 'root zone'. 

The domains table is used to figure out what zones you have but when 
responding, the system trusts whatever you have in records table. 

Aki Tuomi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20130529/9182dc78/attachment-0001.sig>


More information about the Pdns-users mailing list