[Pdns-users] (no subject)

[Brian Candler]

On 17/05/2018 12:01, Mohamad F. Barham wrote:
> Im the one who managing a recursor server not the one who manage an 
> authoritative server for ramallah-gis.ps.
>
> but I noticed the previous case in ramallah-gis.ps domain, SO , is 
> there away to avoid such a problem in the recursor , (force to get 
> from nscp1/2 and not to go further just like what dns.google do ) 

If an authoritative domain is broken for you, then it's most likely 
broken for much of the Internet.

You can force all queries for ramallah-gis.ps to be sent to 
nscp1/2.intertech-pal.com by means of a "forwarders" entry. To do this, 
in your recursor.conf put:

forward-zones-file=/etc/powerdns/forward-zones

And in that file put:

ramallah-gis.ps=46.43.66.107

But if you need this domain to work, I think effort would be better 
spent talking to the domain owner.  Over time your forwarders entry may 
become stale (e.g. if the domain owner moves their nameservice), so you 
are storing up problems for the future.

As for whether pdns recursor merges NS records from the zone with the 
delegation, or replaces them - I defer to the pdns experts.  I pretty 
sure that BIND has implemented both behaviours in different versions.

https://stackoverflow.com/questions/636084/dns-do-the-ns-names-set-for-a-zone-have-to-match-the-ns-names-reported-by-the-u

Regards,

Brian.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20180517/2d6a8fb8/attachment.html>