[Pdns-users] PipeBackend: no remote-ip-address when AXFR?

Aki Tuomi cmouse at youzen.ext.b2.fi
Wed Apr 23 17:45:21 UTC 2014


Did you look at real-remote or remote? The real-remote field is present on
abi version 3 and later (if present). 

Aki

On Wed, Apr 23, 2014 at 07:32:09PM +0200, Daniel Funke wrote:
> Aki,
> 
> this trick doesn't work for me. The query just before the AXFR is a
> SOA-Query for the domain, but the remote-ip-address is "0.0.0.0" for
> this query, not the real address. Maybe you can explain more
> detailed how you do this trick?
> 
> Daniel
> 
> 
> 
> Am 23.04.2014 17:26, schrieb Aki Tuomi:
> >In remotebackend we have support for AXFR with zone name, and for Pipe Backend
> >you can use the trick I use in my python/ruby package. Keep track of last
> >Q name, AXFR will follow a query.
> >
> >Aki
> >
> >On Wed, Apr 23, 2014 at 02:55:28PM +0000, Leigh Porter wrote:
> >>How do you find performance for this? I would like to use a similar approach for a simple DNS filter so I lookup the remote IP address and then, depending upon that I'll choose the view (i.e. RPZ-style filter or not) based on that.
> >>
> >>But I'm concerned that the database lookup will slow it down too much..
> >>
> >>--
> >>Leigh
> >>
> >>
> >>-----Original Message-----
> >>From: pdns-users-bounces at mailman.powerdns.com [mailto:pdns-users-bounces at mailman.powerdns.com] On Behalf Of Daniel Funke
> >>Sent: 23 April 2014 15:53
> >>To: pdns-users at mailman.powerdns.com
> >>Subject: [Pdns-users] PipeBackend: no remote-ip-address when AXFR?
> >>
> >>Hi all,
> >>
> >>to get something like views in bind, I'm trying to use a PipeBackend which is asking a PostgreSQL database.
> >>
> >>For simple queries it works fine because I get the remote-ip-address in the query and can select the depending view from my db.
> >>
> >>But the zone transfer just comes with "AXFR    id", without the ip
> >>address of the client. So I've no plan what to do...
> >>
> >>Any ideas?
> >>
> >>Bye
> >>Daniel
> >>
> >>_______________________________________________
> >>Pdns-users mailing list
> >>Pdns-users at mailman.powerdns.com
> >>http://mailman.powerdns.com/mailman/listinfo/pdns-users
> >>
> >>______________________________________________________________________
> >>This email has been scanned by the Symantec Email Security.cloud service.
> >>For more information please visit http://www.symanteccloud.com ______________________________________________________________________
> >>
> >>______________________________________________________________________
> >>This email has been scanned by the Symantec Email Security.cloud service.
> >>For more information please visit http://www.symanteccloud.com
> >>______________________________________________________________________
> >>
> >>_______________________________________________
> >>Pdns-users mailing list
> >>Pdns-users at mailman.powerdns.com
> >>http://mailman.powerdns.com/mailman/listinfo/pdns-users
> >>
> 
> 
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20140423/b16f3c0c/attachment-0001.sig>


More information about the Pdns-users mailing list