[Pdns-users] Weird behavior with non-terminals

azurit at pobox.sk azurit at pobox.sk
Fri Dec 14 13:19:09 UTC 2018


Hi,

recently, i noticed that slave PowerDNS servers are adding NULL  
records into database after AXFR. I found the explanation here  
(non-terminals):
https://doc.powerdns.com/authoritative/backends/generic-sql.html#rules-for-filling-out-dnssec-fields

Also, i noticed one quite a big problem with non-terminals - they are  
causing that master and slave are having different behavior while  
resolving wildcard subdomains. Imagine this zone:

example.com A 1.1.1.1
*.example.com A 1.1.1.1

With only this, both master and slave (running PowerDNS) will be able  
to resolve this hostname:
one.two.example.com

Now add this record:
test.two.example.com A 2.2.2.2

After AXFR, slave will add non-terminal record for two.example.com AND  
stops resolving two.example.com and *.two.example.com (with NOERROR  
but empty answer). Master continues resolving everything. Is this  
intended behaviour? PowerDNS 4.0.3.

azur




More information about the Pdns-users mailing list